Search for packages
| purl | pkg:pypi/tryton@3.2.8 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-77mz-4wnx-93ez
Aliases: CVE-2016-1241 GHSA-52j9-v3jc-9xgc PYSEC-2016-12 PYSEC-2016-40 |
Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors. |
Affected by 1 other vulnerability. |
|
VCID-nkhg-m2cc-vbfm
Aliases: CVE-2017-0360 GHSA-7cwg-2575-3546 PYSEC-2017-97 |
file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-rjxp-25u1-9khe
Aliases: CVE-2016-1242 GHSA-jpr7-8rxm-4vgx PYSEC-2016-13 PYSEC-2016-41 |
file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-05-31T09:38:09.398762+00:00 | GitLab Importer | Affected by | VCID-nkhg-m2cc-vbfm | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tryton/CVE-2017-0360.yml | 38.6.0 |
| 2026-05-31T09:36:51.246081+00:00 | PyPI Importer | Affected by | VCID-rjxp-25u1-9khe | https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip | 38.6.0 |
| 2026-05-31T09:36:50.911793+00:00 | PyPI Importer | Affected by | VCID-77mz-4wnx-93ez | https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip | 38.6.0 |
| 2026-05-30T20:16:59.416425+00:00 | Pypa Importer | Affected by | VCID-77mz-4wnx-93ez | https://github.com/pypa/advisory-database/blob/main/vulns/tryton/PYSEC-2016-40.yaml | 38.6.0 |
| 2026-05-30T20:16:58.712074+00:00 | Pypa Importer | Affected by | VCID-rjxp-25u1-9khe | https://github.com/pypa/advisory-database/blob/main/vulns/tryton/PYSEC-2016-41.yaml | 38.6.0 |