MEDIUM 4.3 PyPI
GHSA-23fx-92m6-4f2g · CVE-2023-28458, PYSEC-2023-40 pretalx allows path traversal in HTML export
Modified: 10/21/2024
package
PyPI / pretalx
pkg:pypi/pretalx
MEDIUM 5.4 PyPI
PYSEC-2026-108 · CVE-2026-41241, GHSA-cjcx-jfp2-f7m2 Modified: 5/20/2026
MEDIUM 6.1 PyPI
PYSEC-2026-109 · CVE-2026-41426, GHSA-jm8c-9f3j-4378 Modified: 5/20/2026
HIGH 8.7 PyPI
GHSA-cjcx-jfp2-f7m2 · CVE-2026-41241, PYSEC-2026-108 pretalx vulnerable to stored cross-site scripting in organizer search typeahead
Modified: 6/8/2026
MEDIUM 6.1 PyPI
GHSA-jm8c-9f3j-4378 · CVE-2026-41426, PYSEC-2026-109 pretalx mail templates vulnerable to email injection via unescaped user-controlled placeholders
Modified: 6/8/2026
MEDIUM 6.5 PyPI
GHSA-wh3w-jcc7-mhmf · CVE-2023-28459, PYSEC-2023-41 pretalx vulnerable to path traversal in HTML export
Modified: 10/21/2024
— PyPI
PYSEC-2023-40 · CVE-2023-28458, GHSA-23fx-92m6-4f2g Modified: 11/8/2023
— PyPI
PYSEC-2023-41 · CVE-2023-28459, GHSA-wh3w-jcc7-mhmf Modified: 11/8/2023