Search for packages
| purl | pkg:pypi/trytond@5.0.17 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4nwz-9kv7-nkat
Aliases: CVE-2022-26661 GHSA-cj78-rgw3-4h5p PYSEC-2022-43170 |
An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system. |
Affected by 1 other vulnerability. Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-bt9e-28y7-efh3
Aliases: CVE-2025-66422 GHSA-jqfc-9q34-prhg |
trytond allows remote attackers to obtain sensitive trace-back (server setup) information Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-svxa-7cfb-uyba
Aliases: CVE-2022-26662 GHSA-pm3h-mm62-pwm8 PYSEC-2022-43171 |
An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An unauthenticated user can send a crafted XML-RPC message to consume all the resources of the server. |
Affected by 1 other vulnerability. Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-01T09:14:00.164715+00:00 | GitLab Importer | Affected by | VCID-bt9e-28y7-efh3 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/trytond/CVE-2025-66422.yml | 38.6.0 |
| 2026-06-01T06:32:28.973788+00:00 | GitLab Importer | Affected by | VCID-4nwz-9kv7-nkat | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/trytond/CVE-2022-26661.yml | 38.6.0 |
| 2026-06-01T06:32:26.457818+00:00 | GitLab Importer | Affected by | VCID-svxa-7cfb-uyba | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/trytond/CVE-2022-26662.yml | 38.6.0 |