https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:36:51.587170+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-01944 bdu:2019-01944 2026-10-04T15:36:51.706695+00:00 bdu:2019-01944 https://cve.radiocsirt.org/vuln/euvd-2026-53982 EUVD-2026-53982 2026-10-04T15:36:51.706736+00:00 EUVD-2026-53982 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10868 fkie_cve-2019-10868 2026-10-04T15:36:51.706750+00:00

In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values.

 https://cve.radiocsirt.org/vuln/ghsa-f6f2-pwrj-64h3 GHSA-f6f2-pwrj-64h3 — Tryton Improper Access Control 2026-10-04T15:36:51.706781+00:00

Affected: PyPI: trytond

In `trytond/model/modelstorage.py` in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values.

 https://cve.radiocsirt.org/vuln/gsd-2019-10868 gsd-2019-10868 2026-10-04T15:36:51.706809+00:00 gsd-2019-10868 https://cve.radiocsirt.org/vuln/pysec-2019-127 PYSEC-2019-127 2026-10-04T15:36:51.706821+00:00

Affected: PyPI: trytond

In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10868 UBUNTU-CVE-2019-10868 2026-10-04T15:36:51.706839+00:00

Affected: Ubuntu:20.04:LTS: tryton-server, Ubuntu:22.04:LTS: tryton-server

In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field for which he has no access right. This may allow the user to guess values.