CVE-2021-3197
An issue was discovered in SaltStack Salt before 3002.5. The salt-api’s ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request.
Date published : 2021-02-26
https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/