Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2025-66423

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-p3p5-xrmv-4j6x

trytond does not enforce access rights for the route of the HTML editor. Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

gitlab/pypi/trytond/CVE-2025-66423

trytond does not enforce access rights for the route of the HTML editor. Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

pypa/trytond/PYSEC-2026-1991

trytond does not enforce access rights for the route of the HTML editor. Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

pysec/PYSEC-2026-1991

trytond does not enforce access rights for the route of the HTML editor. Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.