GHSA-6qj9-2g9m-29x9: Tryton sao allows XSS because it does not escape completion values

Skip to content

Navigation Menu

• • AI CODE CREATION

    • GitHub CopilotWrite better code with AI

    • GitHub SparkBuild and deploy intelligent apps

    • GitHub ModelsManage and compare prompts

    • MCP RegistryNewIntegrate external tools

View all features

• Pricing

Provide feedback

Saved searches****Use saved searches to filter your results more quickly

Sign up

Appearance settings

1. GitHub Advisory Database
2. GitHub Reviewed
3. CVE-2025-66421

Tryton sao allows XSS because it does not escape completion values

Moderate severity GitHub Reviewed Published Nov 30, 2025 to the GitHub Advisory Database • Updated Dec 2, 2025

Package

npm tryton-sao (npm)

Affected versions

>= 7.5.0, < 7.6.11

>= 7.1.0, < 7.4.21

>= 7.0.0, < 7.0.40

< 6.0.69

Patched versions

7.6.11

7.4.21

7.0.40

6.0.69

Description

Published to the GitHub Advisory Database

Nov 30, 2025