{"action":"Upgrade trytond to 5.0.46 or later.","affected":[{"fixed":"5.0.46","introduced":"5.0.0"},{"fixed":"6.0.16","introduced":"6.0.0"},{"fixed":"6.2.6","introduced":"6.1.0"}],"component":"trytond","cve_ids":["CVE-2022-26661"],"ecosystem":"PyPI","epss":0.01407,"exploited":false,"fixed_versions":["5.0.46","6.0.16","6.2.6"],"ghsa_id":"GHSA-cj78-rgw3-4h5p","id":"tcs_01M5KFD6D37HMAVRTKCQ5JGCC5","modified_at":"2026-07-13T16:42:28.245581563Z","published_at":"2022-03-11T00:02:02Z","references":["https://osv.dev/vulnerability/GHSA-cj78-rgw3-4h5p","https://nvd.nist.gov/vuln/detail/CVE-2022-26661","https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059","https://foss.heptapod.net/tryton/tryton/-/issues/11219","https://hg.tryton.org/trytond","https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html","https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html","https://www.debian.org/security/2022/dsa-5098","https://www.debian.org/security/2022/dsa-5099"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-cj78-rgw3-4h5p","url":"https://osv.dev/vulnerability/GHSA-cj78-rgw3-4h5p"}],"summary":"Improper Restriction of XML External Entity Reference in trytond and proteus"}