--- title: "Security Release for issue #5160 and #14869" url: https://daily.dev/posts/security-release-for-issue-5160-and-14869-4zwwwe6km source_url: https://discuss.tryton.org/t/security-release-for-issue-5160-and-14869/9266 type: article source: "Planet Python" published: 2026-07-03T07:52:23.766Z updated: 2026-07-03T07:52:42.230Z tags: ["security", "python"] reading_time: 1 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Security Release for issue #5160 and #14869 **[Planet Python](https://daily.dev/sources/planetpython)** · 1 min read · 0 upvotes · 0 comments ## Summary Two security vulnerabilities have been disclosed in Tryton's server component (trytond). The first (issue #5160) allows users in the administrator group to execute arbitrary Python code on the server via malicious report templates. The second (issue #14869) extends this attack surface to the marketing group through uploaded marketing email templates. Both are remote code execution via template injection with a CVSS v3.0 base score of 6.5. There is no workaround — affected users must upgrade trytond to versions 8.0.6, 7.8.12, or 7.0.53 or later depending on their series. Note that some custom reports using dynamic or private attributes may break after upgrading and will need to be updated. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Security Release for issue \#14947](https://daily.dev/posts/security-release-for-issue-14947-nvubxdqjv) · Planet Python · 0 upvotes · 0 comments - [Security Release for issue \#14354](https://daily.dev/posts/security-release-for-issue-14354-vsvmljvj1) · Planet Python · 0 upvotes · 0 comments - [Security Release for issue \#14364](https://daily.dev/posts/security-release-for-issue-14364-hwval1tyn) · Planet Python · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#python](https://daily.dev/tags/python) [View this post on daily.dev](https://daily.dev/posts/security-release-for-issue-5160-and-14869-4zwwwe6km)