56 CVEs affecting SaltStack products, 3 known to be exploited (CISA KEV), with EPSS scores. Most affected: Salt, Salt 2015, Salt 2018, Salt 2019, SaltStack.