https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:28:41.919956+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-101841 EUVD-2026-101841 2026-10-04T16:28:42.003310+00:00 EUVD-2026-101841 https://cve.radiocsirt.org/vuln/fkie_cve-2014-6633 fkie_cve-2014-6633 2026-10-04T16:28:42.003347+00:00

The safe_eval function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x before 2.8.11, 3.0.x before 3.0.7, and 3.2.x before 3.2.3 allows remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the collection.domain in the webdav module or (2) the formula field in the price_list module.

 https://cve.radiocsirt.org/vuln/ghsa-m9jj-5qvj-5fhx GHSA-m9jj-5qvj-5fhx — Tryton vulnerable to arbitrary command execution 2026-10-04T16:28:42.003382+00:00

Affected: PyPI: tryton, PyPI: trytond

The `safe_eval` function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x before 2.8.11, 3.0.x before 3.0.7, and 3.2.x before 3.2.3 allows remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the `collection.domain` in the webdav module or (2) the formula field in the `price_list` module.

 https://cve.radiocsirt.org/vuln/gsd-2014-6633 gsd-2014-6633 2026-10-04T16:28:42.003415+00:00 gsd-2014-6633 https://cve.radiocsirt.org/vuln/pysec-2018-59 PYSEC-2018-59 2026-10-04T16:28:42.003428+00:00

Affected: PyPI: trytond

The safe_eval function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x before 2.8.11, 3.0.x before 3.0.7, and 3.2.x before 3.2.3 allows remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the collection.domain in the webdav module or (2) the formula field in the price_list module.