Skip to content

Product

puppetlabs-apt vulnerabilities

1 published CVE affecting puppetlabs-apt, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest puppetlabs-apt CVEs

Newest publication first

  1. CVE-2022-3275 Puppetlabs-apt Command Injection

    Published
    CriticalCVSS 9.8 EPSS 2.4%

    Command injection is possible in the puppetlabs-apt module prior to version 9.0.0. A malicious actor is able to exploit this vulnerability only if they are able to provide unsanitized input to the module. This condition is rare in most deployments of Puppet and Puppet Enterprise.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.