Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/trytond@5.0.6
purl pkg:pypi/trytond@5.0.6
Next non-vulnerable version 6.0.70
Latest non-vulnerable version 7.6.11
Risk 4.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-4nwz-9kv7-nkat
Aliases:
CVE-2022-26661
GHSA-cj78-rgw3-4h5p
PYSEC-2022-43170
An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system.
5.0.46
Affected by 1 other vulnerability.
6.0.16
Affected by 3 other vulnerabilities.
6.2.6
Affected by 0 other vulnerabilities.
VCID-bt9e-28y7-efh3
Aliases:
CVE-2025-66422
GHSA-jqfc-9q34-prhg
trytond allows remote attackers to obtain sensitive trace-back (server setup) information Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
6.0.70
Affected by 0 other vulnerabilities.
7.0.40
Affected by 0 other vulnerabilities.
7.4.21
Affected by 0 other vulnerabilities.
7.6.11
Affected by 0 other vulnerabilities.
VCID-svxa-7cfb-uyba
Aliases:
CVE-2022-26662
GHSA-pm3h-mm62-pwm8
PYSEC-2022-43171
An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An unauthenticated user can send a crafted XML-RPC message to consume all the resources of the server.
5.0.46
Affected by 1 other vulnerability.
6.0.16
Affected by 3 other vulnerabilities.
6.2.6
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-4cd2-1652-yugc In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values. PYSEC-2019-57
VCID-ssd6-u3k1-kyh5 In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values. CVE-2019-10868
GHSA-f6f2-pwrj-64h3
PYSEC-2019-127

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-01T09:14:00.114954+00:00 GitLab Importer Affected by VCID-bt9e-28y7-efh3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/trytond/CVE-2025-66422.yml 38.6.0
2026-06-01T06:32:28.924105+00:00 GitLab Importer Affected by VCID-4nwz-9kv7-nkat https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/trytond/CVE-2022-26661.yml 38.6.0
2026-06-01T06:32:26.404187+00:00 GitLab Importer Affected by VCID-svxa-7cfb-uyba https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/trytond/CVE-2022-26662.yml 38.6.0
2026-05-31T11:18:24.317467+00:00 GithubOSV Importer Fixing VCID-ssd6-u3k1-kyh5 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/04/GHSA-f6f2-pwrj-64h3/GHSA-f6f2-pwrj-64h3.json 38.6.0
2026-05-31T09:37:30.090213+00:00 PyPI Importer Fixing VCID-ssd6-u3k1-kyh5 https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T09:37:29.509388+00:00 PyPI Importer Fixing VCID-4cd2-1652-yugc https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 38.6.0
2026-05-31T00:51:33.190389+00:00 GHSA Importer Fixing VCID-ssd6-u3k1-kyh5 https://github.com/advisories/GHSA-f6f2-pwrj-64h3 38.6.0
2026-05-30T20:54:59.734546+00:00 GitLab Importer Fixing VCID-ssd6-u3k1-kyh5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/trytond/CVE-2019-10868.yml 38.6.0
2026-05-30T20:18:15.514671+00:00 Pypa Importer Fixing VCID-ssd6-u3k1-kyh5 https://github.com/pypa/advisory-database/blob/main/vulns/trytond/PYSEC-2019-127.yaml 38.6.0