{"action":"Upgrade trytond to 2.4.15 or later.","affected":[{"fixed":"2.4.15","introduced":"2.4.0"},{"fixed":"2.6.14","introduced":"2.6.0"},{"fixed":"2.8.11","introduced":"2.8.0"},{"fixed":"3.0.7","introduced":"3.0.0"},{"fixed":"3.2.3","introduced":"3.2.0"}],"component":"trytond","cve_ids":["CVE-2014-6633"],"ecosystem":"PyPI","epss":0.02577,"exploited":false,"fixed_versions":["2.4.15","2.6.14","2.8.11","3.0.7","3.2.3"],"ghsa_id":"GHSA-m9jj-5qvj-5fhx","id":"tcs_01M5KG82RYCJ7TRBJYH03RFH51","modified_at":"2026-07-13T16:42:29.419324345Z","published_at":"2018-04-12T15:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2018-59","https://bugs.tryton.org/issue4155","http://www.tryton.org/posts/security-release-for-issue4155.html","https://github.com/advisories/GHSA-m9jj-5qvj-5fhx"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2018-59","url":"https://osv.dev/vulnerability/PYSEC-2018-59"}],"summary":"The safe_eval function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x before 2.8.11, 3.0.x before 3.0.7, and 3.2.x before 3.2.3 allows remote authenticated users to execute arbitrary c"}