Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/trytond@1.8.2
Typepypi
Namespace
Nametrytond
Version1.8.2
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.2.21
Latest_non_vulnerable_version7.6.11
Affected_by_vulnerabilities
0
url VCID-d2ex-b38e-bbg2
vulnerability_id VCID-d2ex-b38e-bbg2
summary Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-1241
reference_id
reference_type
scores
0
value 0.00105
scoring_system epss
scoring_elements 0.28144
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-1241
1
reference_url https://bugs.tryton.org/issue5795
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugs.tryton.org/issue5795
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/trytond/PYSEC-2016-12.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/trytond/PYSEC-2016-12.yaml
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tryton/PYSEC-2016-40.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/tryton/PYSEC-2016-40.yaml
4
reference_url https://github.com/tryton/trytond
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/tryton/trytond
5
reference_url https://github.com/tryton/trytond/commit/11424d57b7838381745655e2e89470ff9087cd27
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/tryton/trytond/commit/11424d57b7838381745655e2e89470ff9087cd27
6
reference_url https://github.com/tryton/trytond/commit/30d2a6dcaf09340829cd70ee8a15a4941ca7161a
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/tryton/trytond/commit/30d2a6dcaf09340829cd70ee8a15a4941ca7161a
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-1241
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-1241
8
reference_url http://www.debian.org/security/2016/dsa-3656
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2016/dsa-3656
9
reference_url http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.0
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html
fixed_packages
0
url pkg:pypi/trytond@3.2.17
purl pkg:pypi/trytond@3.2.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ye2t-2sf7-6fd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/trytond@3.2.17
1
url pkg:pypi/trytond@3.4.14
purl pkg:pypi/trytond@3.4.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ye2t-2sf7-6fd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/trytond@3.4.14
2
url pkg:pypi/trytond@3.6.12
purl pkg:pypi/trytond@3.6.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ye2t-2sf7-6fd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/trytond@3.6.12
3
url pkg:pypi/trytond@3.8.8
purl pkg:pypi/trytond@3.8.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ye2t-2sf7-6fd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/trytond@3.8.8
4
url pkg:pypi/trytond@4.0.4
purl pkg:pypi/trytond@4.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ye2t-2sf7-6fd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/trytond@4.0.4
aliases CVE-2016-1241, GHSA-52j9-v3jc-9xgc, PYSEC-2016-12, PYSEC-2016-40
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d2ex-b38e-bbg2
1
url VCID-dn5v-2sp3-5uez
vulnerability_id VCID-dn5v-2sp3-5uez
summary file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-1242
reference_id
reference_type
scores
0
value 0.00162
scoring_system epss
scoring_elements 0.36887
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-1242
1
reference_url https://bugs.tryton.org/issue5808
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 5.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugs.tryton.org/issue5808
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1241
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1241
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1242
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1242
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/trytond/PYSEC-2016-13.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 5.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/trytond/PYSEC-2016-13.yaml
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tryton/PYSEC-2016-41.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 5.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/tryton/PYSEC-2016-41.yaml
6
reference_url https://github.com/tryton/trytond
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 5.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/tryton/trytond
7
reference_url http://www.debian.org/security/2016/dsa-3656
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 5.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2016/dsa-3656
8
reference_url http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 5.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-1242
reference_id CVE-2016-1242
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 5.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-1242
10
reference_url https://github.com/advisories/GHSA-jpr7-8rxm-4vgx
reference_id GHSA-jpr7-8rxm-4vgx
reference_type
scores
url https://github.com/advisories/GHSA-jpr7-8rxm-4vgx
fixed_packages
0
url pkg:pypi/trytond@3.2.17
purl pkg:pypi/trytond@3.2.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ye2t-2sf7-6fd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/trytond@3.2.17
1
url pkg:pypi/trytond@3.4.14
purl pkg:pypi/trytond@3.4.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ye2t-2sf7-6fd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/trytond@3.4.14
2
url pkg:pypi/trytond@3.6.12
purl pkg:pypi/trytond@3.6.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ye2t-2sf7-6fd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/trytond@3.6.12
3
url pkg:pypi/trytond@3.8.8
purl pkg:pypi/trytond@3.8.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ye2t-2sf7-6fd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/trytond@3.8.8
4
url pkg:pypi/trytond@4.0.4
purl pkg:pypi/trytond@4.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ye2t-2sf7-6fd6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/trytond@4.0.4
aliases CVE-2016-1242, GHSA-jpr7-8rxm-4vgx, PYSEC-2016-13, PYSEC-2016-41
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dn5v-2sp3-5uez
2
url VCID-w15z-2nug-ebff
vulnerability_id VCID-w15z-2nug-ebff
summary model/modelstorage.py in the Tryton application framework (trytond) before 2.4.0 for Python does not properly restrict access to the Many2Many field in the relation model, which allows remote authenticated users to modify the privileges of arbitrary users via a (1) create, (2) write, (3) delete, or (4) copy rpc call.
references
0
reference_url http://hg.tryton.org/trytond/rev/8e64d52ecea4
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://hg.tryton.org/trytond/rev/8e64d52ecea4
1
reference_url http://news.tryton.org/2012/03/security-releases-for-all-supported.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://news.tryton.org/2012/03/security-releases-for-all-supported.html
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-0215
reference_id
reference_type
scores
0
value 0.00617
scoring_system epss
scoring_elements 0.70315
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-0215
3
reference_url https://bugs.tryton.org/issue2476
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugs.tryton.org/issue2476
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/trytond/PYSEC-2012-6.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/trytond/PYSEC-2012-6.yaml
5
reference_url https://github.com/tryton/trytond
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/tryton/trytond
6
reference_url https://github.com/tryton/trytond/commit/d059ebb792401ded3129cd9402d7392dc34b81e3
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/tryton/trytond/commit/d059ebb792401ded3129cd9402d7392dc34b81e3
7
reference_url https://web.archive.org/web/20121113201043/http://news.tryton.org/2012/03/security-releases-for-all-supported.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20121113201043/http://news.tryton.org/2012/03/security-releases-for-all-supported.html
8
reference_url http://www.debian.org/security/2012/dsa-2444
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2012/dsa-2444
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-0215
reference_id CVE-2012-0215
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2012-0215
10
reference_url https://github.com/advisories/GHSA-cqg4-rf29-3mv6
reference_id GHSA-cqg4-rf29-3mv6
reference_type
scores
url https://github.com/advisories/GHSA-cqg4-rf29-3mv6
fixed_packages
0
url pkg:pypi/trytond@2.2.4
purl pkg:pypi/trytond@2.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d2ex-b38e-bbg2
1
vulnerability VCID-dn5v-2sp3-5uez
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/trytond@2.2.4
1
url pkg:pypi/trytond@2.4.0
purl pkg:pypi/trytond@2.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d2ex-b38e-bbg2
1
vulnerability VCID-dn5v-2sp3-5uez
2
vulnerability VCID-k57g-qscb-yyex
3
vulnerability VCID-kf2v-9dsr-6fhg
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/trytond@2.4.0
aliases CVE-2012-0215, GHSA-cqg4-rf29-3mv6, PYSEC-2012-6
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w15z-2nug-ebff
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/trytond@1.8.2