Odoo · patch intelligence
Is my Odoo revision vulnerable?
Free revision checker for Odoo Community. Enter a version and commit SHA to see Fixed, Missing fix, Not affected, Unknown, or Manual review — based on disclosed CVE-linked fix commits and Git ancestry. Build dates are never used. Enterprise diffs stay internal.
Verdict meanings
- Fixed
- Relevant patch verified present in the installed revision (Git ancestry).
- Missing fix
- Relevant patch verified absent, with applicable vulnerability evidence.
- Not affected
- Installed module inventory does not intersect the fix’s affected modules.
- Unknown
- Insufficient evidence (compare failed, diverged history, or incomplete metadata).
- Manual review
- Requires further investigation (weak binding, conflicting siblings, or incomplete branch attribution).
Required analysis
- Identify confirmed security advisories (CVE-linked disclosed Community commits).
- Find corresponding fix commits and patch families.
- Verify Git ancestry against the installed Community SHA.
- Identify equivalent backports via Change-Id families.
- Determine affected modules and apply the optional inventory filter.
- Verify whether the fix is present, absent, or inconclusive.
- Flag unresolved cases as Unknown or Manual review.
Questions for hosting providers: contact@zerodayfindings.com