Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/tryton@3.4.9
purl pkg:pypi/tryton@3.4.9
Next non-vulnerable version 3.6.17
Latest non-vulnerable version 6.2.6
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-nkhg-m2cc-vbfm
Aliases:
CVE-2017-0360
GHSA-7cwg-2575-3546
PYSEC-2017-97
file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242.
3.6.17
Affected by 0 other vulnerabilities.
3.8.15
Affected by 0 other vulnerabilities.
4.0.10
Affected by 0 other vulnerabilities.
4.2.3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T09:38:09.454664+00:00 GitLab Importer Affected by VCID-nkhg-m2cc-vbfm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/tryton/CVE-2017-0360.yml 38.6.0