Search for packages
| purl | pkg:pypi/tryton@3.0.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-d2ex-b38e-bbg2
Aliases: CVE-2016-1241 PYSEC-2016-12 PYSEC-2016-40 |
Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors. |
Affected by 1 other vulnerability. |
|
VCID-dn5v-2sp3-5uez
Aliases: CVE-2016-1242 GHSA-jpr7-8rxm-4vgx PYSEC-2016-13 PYSEC-2016-41 |
file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-2hdm-7c43-g3f1 | Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report. |
CVE-2013-4510
GHSA-qjmc-wwmw-cq9r PYSEC-2013-28 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-02T04:04:23.541263+00:00 | Pypa Importer | Affected by | VCID-d2ex-b38e-bbg2 | https://github.com/pypa/advisory-database/blob/main/vulns/tryton/PYSEC-2016-40.yaml | 38.6.0 |
| 2026-06-02T04:04:22.832737+00:00 | Pypa Importer | Affected by | VCID-dn5v-2sp3-5uez | https://github.com/pypa/advisory-database/blob/main/vulns/tryton/PYSEC-2016-41.yaml | 38.6.0 |
| 2026-06-02T04:03:22.969698+00:00 | Pypa Importer | Fixing | VCID-2hdm-7c43-g3f1 | https://github.com/pypa/advisory-database/blob/main/vulns/tryton/PYSEC-2013-28.yaml | 38.6.0 |