Search for packages
| purl | pkg:pypi/trytond@4.0.19 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-bt9e-28y7-efh3
Aliases: CVE-2025-66422 GHSA-jqfc-9q34-prhg |
trytond allows remote attackers to obtain sensitive trace-back (server setup) information Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-nkhg-m2cc-vbfm
Aliases: CVE-2017-0360 GHSA-7cwg-2575-3546 PYSEC-2017-97 |
file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242. |
Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-01T09:13:59.620390+00:00 | GitLab Importer | Affected by | VCID-bt9e-28y7-efh3 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/trytond/CVE-2025-66422.yml | 38.6.0 |
| 2026-05-31T09:36:58.207440+00:00 | PyPI Importer | Affected by | VCID-nkhg-m2cc-vbfm | https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip | 38.6.0 |
| 2026-05-30T20:17:13.664675+00:00 | Pypa Importer | Affected by | VCID-nkhg-m2cc-vbfm | https://github.com/pypa/advisory-database/blob/main/vulns/trytond/PYSEC-2017-97.yaml | 38.6.0 |