MEDIUM6.5PyPI
GHSA-2w93-qwpp-vgvj· CVE-2025-66424, PYSEC-2026-1989trytond does not enforce access rights for data export
Modified: 7/7/2026
package
PyPI/trytond
pkg:pypi/trytond
MEDIUM5.3PyPI
GHSA-52j9-v3jc-9xgc· CVE-2016-1241, PYSEC-2016-12Tryton allows users to read the hashed password
Modified: 11/22/2024
MEDIUM5.3PyPI
GHSA-7cwg-2575-3546· CVE-2017-0360, PYSEC-2017-97Tryton Information Disclosure Vulnerability
Modified: 11/18/2024
MEDIUM4.3PyPI
GHSA-c8q5-2j73-qvcc· CVE-2015-0861, PYSEC-2016-11trytond arbitrary fields write via a sequence of records
Modified: 11/29/2024
MEDIUM6.5PyPI
GHSA-cj78-rgw3-4h5p· CVE-2022-26661, PYSEC-2022-43170Improper Restriction of XML External Entity Reference in trytond and proteus
Modified: 7/13/2026
MEDIUM6.5PyPI
GHSA-cqg4-rf29-3mv6· CVE-2012-0215, PYSEC-2012-6Trytond allows modification of privileges of arbitrary users
Modified: 11/18/2024
MEDIUM6.5PyPI
GHSA-f6f2-pwrj-64h3· CVE-2019-10868, PYSEC-2019-127Tryton Improper Access Control
Modified: 11/18/2024
HIGH7.5PyPI
GHSA-jfgc-5vh4-8rh5· CVE-2012-2238, PYSEC-2019-211trytond Incorrect Authorization vulnerability
Modified: 11/18/2024
MEDIUM4.4PyPI
GHSA-jpr7-8rxm-4vgx· CVE-2016-1242, PYSEC-2016-13Tryton allow authenticated users with certain permissions to read arbitrary files via the name parameter
Modified: 11/22/2024
MEDIUM4.3PyPI
GHSA-jqfc-9q34-prhg· CVE-2025-66422, PYSEC-2026-1990trytond allows remote attackers to obtain sensitive trace-back (server setup) information
Modified: 7/7/2026
HIGH8.8PyPI
GHSA-m9jj-5qvj-5fhx· CVE-2014-6633, PYSEC-2018-59Tryton vulnerable to arbitrary command execution
Modified: 7/13/2026
HIGH7.1PyPI
GHSA-p3p5-xrmv-4j6x· CVE-2025-66423, PYSEC-2026-1991trytond does not enforce access rights for the route of the HTML editor.
Modified: 7/7/2026
HIGH7.5PyPI
GHSA-pm3h-mm62-pwm8· CVE-2022-26662, PYSEC-2022-43171XML Entity Expansion in trytond and proteus
Modified: 7/13/2026
HIGH7.5PyPI
GHSA-qjmc-wwmw-cq9r· CVE-2013-4510, PYSEC-2013-28Tryton Directory Traversal vulnerability
Modified: 7/7/2026
—PyPI
PYSEC-2012-6· CVE-2012-0215, GHSA-cqg4-rf29-3mv6Modified: 6/10/2026
—PyPI
PYSEC-2016-11· CVE-2015-0861, GHSA-c8q5-2j73-qvccModified: 6/10/2026
—PyPI
PYSEC-2016-12· CVE-2016-1241, GHSA-52j9-v3jc-9xgcModified: 6/10/2026
—PyPI
PYSEC-2016-13· CVE-2016-1242, GHSA-jpr7-8rxm-4vgxModified: 6/10/2026
—PyPI
PYSEC-2017-97· CVE-2017-0360, GHSA-7cwg-2575-3546Modified: 6/10/2026
—PyPI
PYSEC-2018-59· CVE-2014-6633, GHSA-m9jj-5qvj-5fhxModified: 7/13/2026
—PyPI
PYSEC-2019-127· CVE-2019-10868, GHSA-f6f2-pwrj-64h3Modified: 6/10/2026
—PyPI
PYSEC-2019-211· CVE-2012-2238, GHSA-jfgc-5vh4-8rh5Modified: 6/10/2026
HIGH7.5PyPI
PYSEC-2026-1054· CVE-2013-4510, GHSA-qjmc-wwmw-cq9rTryton Directory Traversal vulnerability
Modified: 7/7/2026
MEDIUM6.5PyPI
PYSEC-2026-1989· CVE-2025-66424, GHSA-2w93-qwpp-vgvjtrytond does not enforce access rights for data export
Modified: 7/7/2026
MEDIUM4.3PyPI
PYSEC-2026-1990· CVE-2025-66422, GHSA-jqfc-9q34-prhgtrytond allows remote attackers to obtain sensitive trace-back (server setup) information
Modified: 7/7/2026
HIGH7.1PyPI
PYSEC-2026-1991· CVE-2025-66423, GHSA-p3p5-xrmv-4j6xtrytond does not enforce access rights for the route of the HTML editor.
Modified: 7/7/2026
MEDIUM6.5PyPI
PYSEC-2026-3391· CVE-2022-26661, GHSA-cj78-rgw3-4h5pImproper Restriction of XML External Entity Reference in trytond and proteus
Modified: 7/13/2026
HIGH7.5PyPI
PYSEC-2026-3392· CVE-2022-26662, GHSA-pm3h-mm62-pwm8XML Entity Expansion in trytond and proteus
Modified: 7/13/2026