Search for packages
| purl | pkg:pypi/tryton@1.6.9 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2hdm-7c43-g3f1
Aliases: CVE-2013-4510 GHSA-qjmc-wwmw-cq9r PYSEC-2013-28 |
Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report. |
Affected by 2 other vulnerabilities. |
|
VCID-d2ex-b38e-bbg2
Aliases: CVE-2016-1241 PYSEC-2016-12 PYSEC-2016-40 |
Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors. |
Affected by 1 other vulnerability. |
|
VCID-dn5v-2sp3-5uez
Aliases: CVE-2016-1242 GHSA-jpr7-8rxm-4vgx PYSEC-2016-13 PYSEC-2016-41 |
file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-02T04:04:23.194611+00:00 | Pypa Importer | Affected by | VCID-d2ex-b38e-bbg2 | https://github.com/pypa/advisory-database/blob/main/vulns/tryton/PYSEC-2016-40.yaml | 38.6.0 |
| 2026-06-02T04:04:22.489634+00:00 | Pypa Importer | Affected by | VCID-dn5v-2sp3-5uez | https://github.com/pypa/advisory-database/blob/main/vulns/tryton/PYSEC-2016-41.yaml | 38.6.0 |
| 2026-06-02T04:03:22.545818+00:00 | Pypa Importer | Affected by | VCID-2hdm-7c43-g3f1 | https://github.com/pypa/advisory-database/blob/main/vulns/tryton/PYSEC-2013-28.yaml | 38.6.0 |