{"id":"EUVD-2025-199920","revision":"878c6edaf05b409ba7ad8d20001de4e0","records":[{"revision":"878c6edaf05b409ba7ad8d20001de4e0","observedAt":"2026-11-11T06:26:44.314+00:00","statement":{"source":"euvd","id":"EUVD-2025-199920","aliases":["CVE-2025-66421","GHSA-6qj9-2g9m-29x9"],"title":"Tryton sao (aka tryton-sao) before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69.","description":"Tryton sao (aka tryton-sao) before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","score":5.4,"severity":null}],"references":["https://discuss.tryton.org/t/security-release-for-issue-14363/8951","https://foss.heptapod.net/tryton/tryton/-/issues/14363"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-199920","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Nov 30, 2025, 12:00:00 AM","dateUpdated":"Dec 1, 2025, 2:10:45 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-199920","identifiers":["EUVD-2025-199920","CVE-2025-66421","GHSA-6qj9-2g9m-29x9"]},"retained":false,"historicalAffected":[]}],"coverage":[]}