20
Affected versions of the package are vulnerable to Return of Wrong Status Code. Salt-call does not fail when bad pillar data is encountered. If something goes wrong and the master returns invalid pillar data salt-call will use a default value from the state instead of failing. This could cause states to get applied which are invalid or a loss of pillar integrity.
You're affected if you are using a version which is within vulnerability ranges.
Upgrade salt library to patch version.