{"action":"Upgrade tryton to 3.0.1 or later.","affected":[{"fixed":"3.0.1","introduced":"0"}],"component":"tryton","cve_ids":["CVE-2013-4510"],"ecosystem":"PyPI","epss":0.02173,"exploited":false,"fixed_versions":["3.0.1"],"ghsa_id":"GHSA-qjmc-wwmw-cq9r","id":"tcs_01M5KG5THT1EWE4QD748EAP10Q","modified_at":"2026-07-07T11:56:37.362518605Z","published_at":"2013-11-18T02:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2013-28","http://hg.tryton.org/tryton/rev/357d0a4d9cb8","http://www.tryton.org/posts/security-release-for-issue3446.html","http://www.debian.org/security/2013/dsa-2791","http://www.openwall.com/lists/oss-security/2013/11/04/21","https://bugs.tryton.org/issue3446"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2013-28","url":"https://osv.dev/vulnerability/PYSEC-2013-28"}],"summary":"Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a re"}