~ / search / GHSA-jqfc-9q34-prhg

GHSA-jqfc-9q34-prhg

trytond allows remote attackers to obtain sensitive trace-back (server setup) information

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-66422

Packages

EcosystemPackageAffectedFixed in
PyPI trytond >= 7.5.0, < 7.6.11 7.6.11
PyPI trytond >= 7.1.0, < 7.4.21 7.4.21
PyPI trytond >= 7.0.0, < 7.0.40 7.0.40
PyPI trytond < 6.0.70 6.0.70

Details

As written in the advisory (Markdown source, shown as plain text).

Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

References

External links from the advisory. They lead to third-party sites.