CVE-2022-26662
5 advisories.
PyPI/trytond CVE-2022-26662: high 7.5
XML Entity Expansion in trytond and proteus
Action: Upgrade trytond to 5.0.46 or later.
pip install trytond==5.0.46pip install trytond==6.0.16pip install trytond==6.2.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.46 | - |
| 6.0.0 | 6.0.16 | - |
| 6.1.0 | 6.2.6 | - |
Fixed versions
| 5.0.46 | 6.0.16 | 6.2.6 |
Sources
- osv: GHSA-pm3h-mm62-pwm8
- https://nvd.nist.gov/vuln/detail/CVE-2022-26662
- https://bugs.tryton.org/issue11244
- https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059
- https://hg.tryton.org/trytond
- https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html
- https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html
- https://www.debian.org/security/2022/dsa-5098
- https://www.debian.org/security/2022/dsa-5099
CVE-2022-26662 · published · modified · JSON
PyPI/proteus CVE-2022-26662: high 7.5
XML Entity Expansion in trytond and proteus
Action: Upgrade proteus to 5.0.12 or later.
pip install proteus==5.0.12pip install proteus==6.0.5pip install proteus==6.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.12 | - |
| 6.0.0 | 6.0.5 | - |
| 6.1.0 | 6.2.2 | - |
Fixed versions
| 5.0.12 | 6.0.5 | 6.2.2 |
Sources
- osv: GHSA-pm3h-mm62-pwm8#PyPI/proteus
- https://nvd.nist.gov/vuln/detail/CVE-2022-26662
- https://bugs.tryton.org/issue11244
- https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059
- https://hg.tryton.org/trytond
- https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html
- https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html
- https://www.debian.org/security/2022/dsa-5098
- https://www.debian.org/security/2022/dsa-5099
CVE-2022-26662 · published · modified · JSON
PyPI/tryton CVE-2022-26662: high 7.5
An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (C
Action: Upgrade tryton to 5.0.12 or later.
pip install tryton==5.0.12pip install tryton==6.0.5pip install tryton==6.2.2pip install tryton==6.2.6pip install tryton==6.0.16pip install tryton==5.0.46Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.12 | - |
| 6.0.0 | 6.0.5 | - |
| 6.2.0 | 6.2.2 | - |
Fixed versions
| 5.0.12 | 6.0.5 | 6.2.2 | 6.2.6 | 6.0.16 | 5.0.46 |
Sources
- osv: PYSEC-2022-43171
- https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059
- https://bugs.tryton.org/issue11244
- https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html
- https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html
- https://www.debian.org/security/2022/dsa-5098
- https://www.debian.org/security/2022/dsa-5099
CVE-2022-26662 · published · modified · JSON
PyPI/trytond CVE-2022-26662: high 7.5
XML Entity Expansion in trytond and proteus
Action: Upgrade trytond to 5.0.46 or later.
pip install trytond==5.0.46pip install trytond==6.0.16pip install trytond==6.2.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.46 | - |
| 6.0.0 | 6.0.16 | - |
| 6.1.0 | 6.2.6 | - |
Fixed versions
| 5.0.46 | 6.0.16 | 6.2.6 |
Sources
- osv: PYSEC-2026-3392
- https://nvd.nist.gov/vuln/detail/CVE-2022-26662
- https://bugs.tryton.org/issue11244
- https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059
- https://hg.tryton.org/trytond
- https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html
- https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html
- https://www.debian.org/security/2022/dsa-5098
- https://www.debian.org/security/2022/dsa-5099
- https://pypi.org/project/trytond
- https://github.com/advisories/GHSA-pm3h-mm62-pwm8
CVE-2022-26662 · published · modified · JSON
PyPI/proteus CVE-2022-26662: high 7.5
XML Entity Expansion in trytond and proteus
Action: Upgrade proteus to 5.0.12 or later.
pip install proteus==5.0.12pip install proteus==6.0.5pip install proteus==6.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.12 | - |
| 6.0.0 | 6.0.5 | - |
| 6.1.0 | 6.2.2 | - |
Fixed versions
| 5.0.12 | 6.0.5 | 6.2.2 |
Sources
- osv: PYSEC-2026-741
- https://nvd.nist.gov/vuln/detail/CVE-2022-26662
- https://bugs.tryton.org/issue11244
- https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059
- https://hg.tryton.org/trytond
- https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html
- https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html
- https://www.debian.org/security/2022/dsa-5098
- https://www.debian.org/security/2022/dsa-5099
- https://pypi.org/project/proteus
- https://github.com/advisories/GHSA-pm3h-mm62-pwm8
CVE-2022-26662 · published · modified · JSON