Skip to main content
cve.nowby Sazabi
← npm
npmPackage

tryton-sao

2 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 medium
Registry
npm

Advisories 2

  • CVE-2025-66421Medium 5.4

    Tryton sao (aka tryton-sao) before 7.6.11 allows XSS because it does not escape completion values.

    Affected: from 7.5.0, fixed in 7.6.11; from 7.1.0, fixed in 7.4.21; from 7.0.0, fixed in 7.0.40; fixed in 6.0.69.

  • CVE-2025-66420Medium 5.4

    Tryton sao (aka tryton-sao) before 7.6.9 allows XSS via an HTML attachment.

    Affected: from 7.5.0, fixed in 7.6.9; from 7.1.0, fixed in 7.4.19; from 7.0.0, fixed in 7.0.38; fixed in 6.0.67.