https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:15:33 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-15052 EUVD-2026-15052 https://cve.radiocsirt.org/vuln/euvd-2026-15052 https://cve.radiocsirt.org/vuln/fkie_cve-2022-26661 <p>An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system.</p> <p>An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-26661 https://cve.radiocsirt.org/vuln/ghsa-cj78-rgw3-4h5p <p><strong>Affected:</strong> PyPI: trytond, PyPI: proteus</p> <p>An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system.</p> <p><strong>Affected:</strong> PyPI: trytond, PyPI: proteus</p> <p>An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system.</p> https://cve.radiocsirt.org/vuln/ghsa-cj78-rgw3-4h5p https://cve.radiocsirt.org/vuln/gsd-2022-26661 gsd-2022-26661 https://cve.radiocsirt.org/vuln/gsd-2022-26661 https://cve.radiocsirt.org/vuln/pysec-2022-43170 <p><strong>Affected:</strong> PyPI: tryton</p> <p>An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system.</p> <p><strong>Affected:</strong> PyPI: tryton</p> <p>An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system.</p> https://cve.radiocsirt.org/vuln/pysec-2022-43170 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-26661 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: tryton-proteus, Ubuntu:16.04:LTS: tryton-server, Ubuntu:18.04:LTS: tryton-proteus, Ubuntu:18.04:LTS: tryton-server, Ubuntu:20.04:LTS: tryton-proteus, Ubuntu:20.04:LTS: tryton-server, Ubuntu:22.04:LTS: tryton-proteus, Ubuntu:22.04:LTS: tryton-server, Ubuntu:24.04:LTS: tryton-proteus, Ubuntu:24.04:LTS: tryton-server and 4 more</p> <p>An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: tryton-proteus, Ubuntu:16.04:LTS: tryton-server, Ubuntu:18.04:LTS: tryton-proteus, Ubuntu:18.04:LTS: tryton-server, Ubuntu:20.04:LTS: tryton-proteus, Ubuntu:20.04:LTS: tryton-server, Ubuntu:22.04:LTS: tryton-proteus, Ubuntu:22.04:LTS: tryton-server, Ubuntu:24.04:LTS: tryton-proteus, Ubuntu:24.04:LTS: tryton-server and 4 more</p> <p>An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user can make the server parse a crafted XML SEPA file to access arbitrary files on the system.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-26661