[Bug] Unsafe yaml decoder in junos execution module.

[dwoz]

What happened?

CVE-2025-62348

Unsafe yaml decode could lead to un-intended code execution. Salt's junos module has an unsafe yaml decode call.

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L

Attribution: Amr Kadry <amrkadry568@gmail.com>

Type of salt install

Official deb

Major version

3006.x

What supported OS are you seeing the problem on? Can select multiple. (If bug appears on an unsupported OS, please open a GitHub Discussion instead)

almalinux-8

salt --versions-report output

n/a