{"action":"Upgrade tryton to 5.0.12 or later.","affected":[{"fixed":"5.0.12","introduced":"5.0.0"},{"fixed":"6.0.5","introduced":"6.0.0"},{"fixed":"6.2.2","introduced":"6.2.0"}],"component":"tryton","cve_ids":["CVE-2022-26662"],"ecosystem":"PyPI","epss":0.01973,"exploited":false,"fixed_versions":["5.0.12","6.0.5","6.2.2","6.2.6","6.0.16","5.0.46"],"ghsa_id":"GHSA-pm3h-mm62-pwm8","id":"tcs_01M5KGHVRNTYXHRRB2BXHYSKXR","modified_at":"2026-07-13T16:43:06.410889598Z","published_at":"2022-03-10T17:47:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-43171","https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059","https://bugs.tryton.org/issue11244","https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html","https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html","https://www.debian.org/security/2022/dsa-5098","https://www.debian.org/security/2022/dsa-5099"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2022-43171","url":"https://osv.dev/vulnerability/PYSEC-2022-43171"}],"summary":"An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (C"}