Components
Vulnerabilities
Pricing
MCP
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
Ecosystem
Package
Version
Vulnerabilities
CVE-2025-66421
CVE-2025-66421
Tryton sao (aka tryton-sao) before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69.
Published Dec 2, 2025
https://github.com/advisories/GHSA-6qj9-2g9m-29x9
CVSS Score
Medium
6.2
Components Impacted
Components Impacted
Security Details
Security Details
Sonatype Research
Sonatype Research
Ecosystem
Package
Version
Ecosystem
Package
Version
npm
tryton-sao
3.8.0
npm
tryton-sao
3.8.10
npm
tryton-sao
3.8.11
npm
tryton-sao
3.8.12
npm
tryton-sao
3.8.13
npm
tryton-sao
3.8.14
npm
tryton-sao
3.8.15
npm
tryton-sao
3.8.16
npm
tryton-sao
3.8.17
npm
tryton-sao
3.8.18
npm
tryton-sao
3.8.19
npm
tryton-sao
3.8.1
npm
tryton-sao
3.8.20
npm
tryton-sao
3.8.21
npm
tryton-sao
3.8.2
npm
tryton-sao
3.8.3
npm
tryton-sao
3.8.4
npm
tryton-sao
3.8.5
npm
tryton-sao
3.8.6
npm
tryton-sao
3.8.7
npm
tryton-sao
3.8.8
npm
tryton-sao
3.8.9
npm
tryton-sao
4.0.0
npm
tryton-sao
4.0.10
npm
tryton-sao
4.0.11
npm
tryton-sao
4.0.12
npm
tryton-sao
4.0.13
npm
tryton-sao
4.0.14
npm
tryton-sao
4.0.15
npm
tryton-sao
4.0.16
npm
tryton-sao
4.0.17
npm
tryton-sao
4.0.18
npm
tryton-sao
4.0.19
npm
tryton-sao
4.0.1
npm
tryton-sao
4.0.20
npm
tryton-sao
4.0.21
npm
tryton-sao
4.0.22
npm
tryton-sao
4.0.23
npm
tryton-sao
4.0.2
npm
tryton-sao
4.0.3
npm
tryton-sao
4.0.4
npm
tryton-sao
4.0.5
npm
tryton-sao
4.0.6
npm
tryton-sao
4.0.7
npm
tryton-sao
4.0.8
npm
tryton-sao
4.0.9
npm
tryton-sao
4.2.0
npm
tryton-sao
4.2.10
npm
tryton-sao
4.2.11
npm
tryton-sao
4.2.12
1-50 of 512
CVE-2025-66421 | Components Impacted | Sonatype Guide | Sonatype Guide