GHSA-2w93-qwpp-vgvj: trytond does not enforce access rights for data export

Skip to content

Navigation Menu

• • AI CODE CREATION

    • GitHub CopilotWrite better code with AI

    • GitHub SparkBuild and deploy intelligent apps

    • GitHub ModelsManage and compare prompts

    • MCP RegistryNewIntegrate external tools

View all features

• Pricing

Provide feedback

Saved searches****Use saved searches to filter your results more quickly

Sign up

Appearance settings

1. GitHub Advisory Database
2. GitHub Reviewed
3. CVE-2025-66424

trytond does not enforce access rights for data export

Moderate severity GitHub Reviewed Published Nov 30, 2025 to the GitHub Advisory Database • Updated Dec 2, 2025

Package

pip trytond (pip)

Affected versions

>= 7.5.0, < 7.6.11

>= 7.1.0, < 7.4.21

>= 7.0.0, < 7.0.40

>= 6.0.0, < 6.0.70

Patched versions

7.6.11

7.4.21

7.0.40

6.0.70

Description

Published to the GitHub Advisory Database

Nov 30, 2025