Skip to content
OpenAdvisories
High DSA-6064-1 3 CVEs

tryton-server - security update

Published Nov 27, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 12 tryton-server 6.0.29-2+deb12u4
Debian · 13 tryton-server 7.0.30-1+deb13u1

Vulnerabilities 3

  • High 7.1
    CVE-2025-66423

    trytond does not enforce access rights for the route of the HTML editor.

    Tryton trytond 6.0 before 7.6.11 does not enforce access rights for the route of the HTML editor. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

    Tryton trytond trytond tryton-server Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2025-66424

    trytond does not enforce access rights for data export

    Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

    Tryton trytond trytond tryton-server Debian Ubuntu PyPI
  • Medium 4.3
    CVE-2025-66422

    trytond allows remote attackers to obtain sensitive trace-back (server setup) information

    Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back (server setup) information. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70.

    Tryton trytond trytond tryton-server Debian Ubuntu PyPI