tocsin

CVE-2022-26662

5 advisories.

PyPI/trytond CVE-2022-26662: high 7.5

XML Entity Expansion in trytond and proteus

Action: Upgrade trytond to 5.0.46 or later.

pip install trytond==5.0.46
pip install trytond==6.0.16
pip install trytond==6.2.6

Affected

introducedfixedlast affected
5.0.05.0.46-
6.0.06.0.16-
6.1.06.2.6-

Fixed versions

5.0.466.0.166.2.6

Sources

CVE-2022-26662 · published · modified · JSON

PyPI/proteus CVE-2022-26662: high 7.5

XML Entity Expansion in trytond and proteus

Action: Upgrade proteus to 5.0.12 or later.

pip install proteus==5.0.12
pip install proteus==6.0.5
pip install proteus==6.2.2

Affected

introducedfixedlast affected
5.0.05.0.12-
6.0.06.0.5-
6.1.06.2.2-

Fixed versions

5.0.126.0.56.2.2

Sources

CVE-2022-26662 · published · modified · JSON

PyPI/tryton CVE-2022-26662: high 7.5

An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (C

Action: Upgrade tryton to 5.0.12 or later.

pip install tryton==5.0.12
pip install tryton==6.0.5
pip install tryton==6.2.2
pip install tryton==6.2.6
pip install tryton==6.0.16
pip install tryton==5.0.46

Affected

introducedfixedlast affected
5.0.05.0.12-
6.0.06.0.5-
6.2.06.2.2-

Fixed versions

5.0.126.0.56.2.26.2.66.0.165.0.46

Sources

CVE-2022-26662 · published · modified · JSON

PyPI/trytond CVE-2022-26662: high 7.5

XML Entity Expansion in trytond and proteus

Action: Upgrade trytond to 5.0.46 or later.

pip install trytond==5.0.46
pip install trytond==6.0.16
pip install trytond==6.2.6

Affected

introducedfixedlast affected
5.0.05.0.46-
6.0.06.0.16-
6.1.06.2.6-

Fixed versions

5.0.466.0.166.2.6

Sources

CVE-2022-26662 · published · modified · JSON

PyPI/proteus CVE-2022-26662: high 7.5

XML Entity Expansion in trytond and proteus

Action: Upgrade proteus to 5.0.12 or later.

pip install proteus==5.0.12
pip install proteus==6.0.5
pip install proteus==6.2.2

Affected

introducedfixedlast affected
5.0.05.0.12-
6.0.06.0.5-
6.1.06.2.2-

Fixed versions

5.0.126.0.56.2.2

Sources

CVE-2022-26662 · published · modified · JSON