trytond vulnerabilities
CVEs whose affected-version data names the trytond package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
7 CVEsRSS
CVE-2025-66423High· 7.1Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor
Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
CVE-2025-66422Medium· 4.3Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information
Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
CVE-2025-66424Medium· 6.5Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export
Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.
CVE-2013-4510High· 7.5Tryton Directory Traversal vulnerability
Tryton Directory Traversal vulnerability
CVE-2014-6633High· 8.8Tryton vulnerable to arbitrary command execution
Tryton vulnerable to arbitrary command execution
CVE-2022-26662High· 7.5XML Entity Expansion in trytond and proteus
XML Entity Expansion in trytond and proteus
CVE-2022-26661Medium· 6.5Improper Restriction of XML External Entity Reference in trytond and proteus
Improper Restriction of XML External Entity Reference in trytond and proteus