CVE-2022-26661
5 advisories.
PyPI/trytond CVE-2022-26661: medium 6.5
Improper Restriction of XML External Entity Reference in trytond and proteus
Action: Upgrade trytond to 5.0.46 or later.
pip install trytond==5.0.46pip install trytond==6.0.16pip install trytond==6.2.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.46 | - |
| 6.0.0 | 6.0.16 | - |
| 6.1.0 | 6.2.6 | - |
Fixed versions
| 5.0.46 | 6.0.16 | 6.2.6 |
Sources
- osv: GHSA-cj78-rgw3-4h5p
- https://nvd.nist.gov/vuln/detail/CVE-2022-26661
- https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059
- https://foss.heptapod.net/tryton/tryton/-/issues/11219
- https://hg.tryton.org/trytond
- https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html
- https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html
- https://www.debian.org/security/2022/dsa-5098
- https://www.debian.org/security/2022/dsa-5099
CVE-2022-26661 · published · modified · JSON
PyPI/proteus CVE-2022-26661: medium 6.5
Improper Restriction of XML External Entity Reference in trytond and proteus
Action: Upgrade proteus to 5.0.12 or later.
pip install proteus==5.0.12pip install proteus==6.0.5pip install proteus==6.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.12 | - |
| 6.0.0 | 6.0.5 | - |
| 6.1.0 | 6.2.2 | - |
Fixed versions
| 5.0.12 | 6.0.5 | 6.2.2 |
Sources
- osv: GHSA-cj78-rgw3-4h5p#PyPI/proteus
- https://nvd.nist.gov/vuln/detail/CVE-2022-26661
- https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059
- https://foss.heptapod.net/tryton/tryton/-/issues/11219
- https://hg.tryton.org/trytond
- https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html
- https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html
- https://www.debian.org/security/2022/dsa-5098
- https://www.debian.org/security/2022/dsa-5099
CVE-2022-26661 · published · modified · JSON
PyPI/tryton CVE-2022-26661: medium 6.5
An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (pro
Action: Upgrade tryton to 5.0.12 or later.
pip install tryton==5.0.12pip install tryton==6.0.5pip install tryton==6.2.2pip install tryton==6.2.6pip install tryton==6.0.16pip install tryton==5.0.46Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.12 | - |
| 6.0.0 | 6.0.5 | - |
| 6.2.0 | 6.2.2 | - |
Fixed versions
| 5.0.12 | 6.0.5 | 6.2.2 | 6.2.6 | 6.0.16 | 5.0.46 |
Sources
- osv: PYSEC-2022-43170
- https://bugs.tryton.org/issue11219
- https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059
- https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html
- https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html
- https://www.debian.org/security/2022/dsa-5098
- https://www.debian.org/security/2022/dsa-5099
CVE-2022-26661 · published · modified · JSON
PyPI/trytond CVE-2022-26661: medium 6.5
Improper Restriction of XML External Entity Reference in trytond and proteus
Action: Upgrade trytond to 5.0.46 or later.
pip install trytond==5.0.46pip install trytond==6.0.16pip install trytond==6.2.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.46 | - |
| 6.0.0 | 6.0.16 | - |
| 6.1.0 | 6.2.6 | - |
Fixed versions
| 5.0.46 | 6.0.16 | 6.2.6 |
Sources
- osv: PYSEC-2026-3391
- https://nvd.nist.gov/vuln/detail/CVE-2022-26661
- https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059
- https://foss.heptapod.net/tryton/tryton/-/issues/11219
- https://hg.tryton.org/trytond
- https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html
- https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html
- https://www.debian.org/security/2022/dsa-5098
- https://www.debian.org/security/2022/dsa-5099
- https://pypi.org/project/trytond
- https://github.com/advisories/GHSA-cj78-rgw3-4h5p
CVE-2022-26661 · published · modified · JSON
PyPI/proteus CVE-2022-26661: medium 6.5
Improper Restriction of XML External Entity Reference in trytond and proteus
Action: Upgrade proteus to 5.0.12 or later.
pip install proteus==5.0.12pip install proteus==6.0.5pip install proteus==6.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.12 | - |
| 6.0.0 | 6.0.5 | - |
| 6.1.0 | 6.2.2 | - |
Fixed versions
| 5.0.12 | 6.0.5 | 6.2.2 |
Sources
- osv: PYSEC-2026-740
- https://nvd.nist.gov/vuln/detail/CVE-2022-26661
- https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059
- https://foss.heptapod.net/tryton/tryton/-/issues/11219
- https://hg.tryton.org/trytond
- https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html
- https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html
- https://www.debian.org/security/2022/dsa-5098
- https://www.debian.org/security/2022/dsa-5099
- https://pypi.org/project/proteus
- https://github.com/advisories/GHSA-cj78-rgw3-4h5p
CVE-2022-26661 · published · modified · JSON