CVE-2026-9712低 3.8When creating an export through the pretix API, API clients are
returned an UUID value for their export job (a long, random string like
35…
CVE-2026-5600中 4.3A new API endpoint introduced in pretix 2025 that is supposed to
return all check-in events of a specific event in fact returns all
check-…
CVE-2026-2415中 5.9Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name}
is used in an email templat…
CVE-2025-14882低 3.8An API endpoint allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible b…
CVE-2025-14881低 3.8Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be acces…