{"action":"Upgrade proteus to 5.0.12 or later.","affected":[{"fixed":"5.0.12","introduced":"5.0.0"},{"fixed":"6.0.5","introduced":"6.0.0"},{"fixed":"6.2.2","introduced":"6.1.0"}],"component":"proteus","cve_ids":["CVE-2022-26661"],"ecosystem":"PyPI","epss":0.01407,"exploited":false,"fixed_versions":["5.0.12","6.0.5","6.2.2"],"ghsa_id":"GHSA-cj78-rgw3-4h5p","id":"tcs_01M5KHD8716KKME5QA9B1TYNQQ","modified_at":"2026-07-13T16:42:28.245581563Z","published_at":"2026-07-02T14:13:15.757085Z","references":["https://osv.dev/vulnerability/PYSEC-2026-740","https://nvd.nist.gov/vuln/detail/CVE-2022-26661","https://discuss.tryton.org/t/security-release-for-issue11219-and-issue11244/5059","https://foss.heptapod.net/tryton/tryton/-/issues/11219","https://hg.tryton.org/trytond","https://lists.debian.org/debian-lts-announce/2022/03/msg00016.html","https://lists.debian.org/debian-lts-announce/2022/03/msg00017.html","https://www.debian.org/security/2022/dsa-5098","https://www.debian.org/security/2022/dsa-5099","https://pypi.org/project/proteus","https://github.com/advisories/GHSA-cj78-rgw3-4h5p"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-740","url":"https://osv.dev/vulnerability/PYSEC-2026-740"}],"summary":"Improper Restriction of XML External Entity Reference in trytond and proteus"}