Ecosystem	Package	Version

Vulnerabilities

CVE-2025-66424

CVE-2025-66424

Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

Published Dec 1, 2025

https://github.com/advisories/GHSA-2w93-qwpp-vgvj

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


pypi	m9s-trytond	6.0.14.1
pypi	m9s-trytond	6.0.14
pypi	m9s-trytond	6.0.15
pypi	m9s-trytond	6.0.17.1
pypi	m9s-trytond	6.0.17
pypi	m9s-trytond	6.0.19
pypi	m9s-trytond	6.0.21.1
pypi	m9s-trytond	6.0.21.2
pypi	m9s-trytond	6.0.34
pypi	m9s-trytond	6.0.35
pypi	m9s-trytond	6.0.38
pypi	m9s-trytond	7.0.19.1
pypi	m9s-trytond	7.0.19
pypi	m9s-trytond	7.0.3
pypi	m9s-trytond	7.0.6
pypi	m9s-trytond	7.0.7
pypi	trytond	1.2.10
pypi	trytond	1.2.8
pypi	trytond	1.2.9
pypi	trytond	1.4.10
pypi	trytond	1.4.11
pypi	trytond	1.4.12
pypi	trytond	1.4.13
pypi	trytond	1.4.8
pypi	trytond	1.4.9
pypi	trytond	1.6.10
pypi	trytond	1.6.3
pypi	trytond	1.6.4
pypi	trytond	1.6.5
pypi	trytond	1.6.6
pypi	trytond	1.6.7
pypi	trytond	1.6.8
pypi	trytond	1.6.9
pypi	trytond	1.8.10
pypi	trytond	1.8.11
pypi	trytond	1.8.2
pypi	trytond	1.8.3
pypi	trytond	1.8.4
pypi	trytond	1.8.5
pypi	trytond	1.8.6
pypi	trytond	1.8.7
pypi	trytond	1.8.8
pypi	trytond	1.8.9
pypi	trytond	2.0.0
pypi	trytond	2.0.10
pypi	trytond	2.0.11
pypi	trytond	2.0.12
pypi	trytond	2.0.13
pypi	trytond	2.0.1
pypi	trytond	2.0.2

CVE-2025-66424 | Components Impacted | Sonatype Guide | Sonatype Guide