How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Security Release for issue 15032

calendar_today October 5, 2026 person ced domain tryton

Jaisurya has discovered that the content of the HTML editor was not escaped . Impact CVSS v3.0 Base Score: 5.4 Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: Required Scope: Changed Confidentiality: Low Integrity: Low Availability: None Workaround Setup restrictive CSP without unsafe inline script may prevent the attack. Resolution All affected users should upgrade trytond to the latest version.

open_in_new Read original post