Search for packages
| purl | pkg:pypi/trytond@4.8.10 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-kjnf-nmzs-c7b5 | In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values. |
CVE-2019-10868
GHSA-f6f2-pwrj-64h3 PYSEC-2019-127 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-02T04:39:06.349132+00:00 | GitLab Importer | Fixing | VCID-kjnf-nmzs-c7b5 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/trytond/CVE-2019-10868.yml | 38.6.0 |
| 2026-06-02T04:05:36.998368+00:00 | Pypa Importer | Fixing | VCID-kjnf-nmzs-c7b5 | https://github.com/pypa/advisory-database/blob/main/vulns/trytond/PYSEC-2019-127.yaml | 38.6.0 |