{"action":"Upgrade tryton to 5.0.12 or later.","affected":[{"fixed":"5.0.12","introduced":"5.0.0"},{"fixed":"6.0.5","introduced":"6.0.0"},{"fixed":"6.2.2","introduced":"6.2.0"}],"component":"tryton","cve_ids":["CVE-2022-26661"],"ecosystem":"PyPI","epss":0.01407,"exploited":false,"fixed_versions":["5.0.12","6.0.5","6.2.2","6.2.6","6.0.16","5.0.46"],"ghsa_id":"GHSA-cj78-rgw3-4h5p","id":"tcs_01M5KGHVKBYRY2XK7APGA0R6EB","modified_at":"2026-07-13T16:42:28.245581563Z","published_at":"2022-03-10T17:47:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-43170","https://bugs.tryton.org/issue11219","https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059","https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html","https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html","https://www.debian.org/security/2022/dsa-5098","https://www.debian.org/security/2022/dsa-5099"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2022-43170","url":"https://osv.dev/vulnerability/PYSEC-2022-43170"}],"summary":"An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (pro"}