MEDIUM 6.5 PyPI
GHSA-2w93-qwpp-vgvj · CVE-2025-66424 trytond does not enforce access rights for data export
Modified: 12/2/2025
package
PyPI / trytond
pkg:pypi/trytond
MEDIUM 5.3 PyPI
GHSA-52j9-v3jc-9xgc · CVE-2016-1241, PYSEC-2016-12 Tryton allows users to read the hashed password
Modified: 11/22/2024
MEDIUM 5.3 PyPI
GHSA-7cwg-2575-3546 · CVE-2017-0360, PYSEC-2017-97 Tryton Information Disclosure Vulnerability
Modified: 11/18/2024
MEDIUM 4.3 PyPI
GHSA-c8q5-2j73-qvcc · CVE-2015-0861, PYSEC-2016-11 trytond arbitrary fields write via a sequence of records
Modified: 11/29/2024
MEDIUM 6.5 PyPI
GHSA-cj78-rgw3-4h5p · CVE-2022-26661, PYSEC-2022-43170 Improper Restriction of XML External Entity Reference in trytond and proteus
Modified: 11/21/2024
MEDIUM 6.5 PyPI
GHSA-cqg4-rf29-3mv6 · CVE-2012-0215, PYSEC-2012-6 Trytond allows modification of privileges of arbitrary users
Modified: 11/18/2024
MEDIUM 6.5 PyPI
GHSA-f6f2-pwrj-64h3 · CVE-2019-10868, PYSEC-2019-127 Tryton Improper Access Control
Modified: 11/18/2024
HIGH 7.5 PyPI
GHSA-jfgc-5vh4-8rh5 · CVE-2012-2238, PYSEC-2019-211 trytond Incorrect Authorization vulnerability
Modified: 11/18/2024
MEDIUM 4.4 PyPI
GHSA-jpr7-8rxm-4vgx · CVE-2016-1242, PYSEC-2016-13 Tryton allow authenticated users with certain permissions to read arbitrary files via the name parameter
Modified: 11/22/2024
MEDIUM 4.3 PyPI
GHSA-jqfc-9q34-prhg · CVE-2025-66422 trytond allows remote attackers to obtain sensitive trace-back (server setup) information
Modified: 12/2/2025
HIGH 8.8 PyPI
GHSA-m9jj-5qvj-5fhx · CVE-2014-6633, PYSEC-2018-59 Tryton vulnerable to arbitrary command execution
Modified: 11/18/2024
HIGH 7.1 PyPI
GHSA-p3p5-xrmv-4j6x · CVE-2025-66423 trytond does not enforce access rights for the route of the HTML editor.
Modified: 12/2/2025
HIGH 7.5 PyPI
GHSA-pm3h-mm62-pwm8 · CVE-2022-26662, PYSEC-2022-43171 XML Entity Expansion in trytond and proteus
Modified: 11/21/2024
HIGH 7.5 PyPI
GHSA-qjmc-wwmw-cq9r · CVE-2013-4510, PYSEC-2013-28 Tryton Directory Traversal vulnerability
Modified: 11/18/2024
— PyPI
PYSEC-2012-6 · CVE-2012-0215, GHSA-cqg4-rf29-3mv6 Modified: 1/12/2024
— PyPI
PYSEC-2016-11 · CVE-2015-0861, GHSA-c8q5-2j73-qvcc Modified: 4/29/2024
— PyPI
PYSEC-2016-12 · CVE-2016-1241, GHSA-52j9-v3jc-9xgc Modified: 11/21/2024
— PyPI
PYSEC-2016-13 · CVE-2016-1242, GHSA-jpr7-8rxm-4vgx Modified: 11/21/2024
— PyPI
PYSEC-2017-97 · CVE-2017-0360, GHSA-7cwg-2575-3546 Modified: 4/22/2024
— PyPI
PYSEC-2018-59 · CVE-2014-6633, GHSA-m9jj-5qvj-5fhx Modified: 6/8/2026
— PyPI
PYSEC-2019-127 · CVE-2019-10868, GHSA-f6f2-pwrj-64h3 Modified: 11/8/2023
— PyPI
PYSEC-2019-211 · CVE-2012-2238, GHSA-jfgc-5vh4-8rh5 Modified: 4/29/2024