LOWPyPI
GHSA-2mm6-624x-fqrr· CVE-2025-13742, PYSEC-2025-154pretix has Email Content Injection Through Maliciously Formatted Names
Modified: 6/9/2026
package
PyPI/pretix
pkg:pypi/pretix
HIGHPyPI
GHSA-45rp-q25w-4426· CVE-2024-8113, PYSEC-2024-180pretix Stored Cross-site Scripting vulnerability
Modified: 1/21/2025
MEDIUMPyPI
GHSA-672r-97r7-vx2q· CVE-2024-27447, PYSEC-2024-253pretix mishandles file validation
Modified: 6/11/2025
LOWPyPI
GHSA-72p9-6vv6-gvqh· CVE-2026-9712, PYSEC-2026-2960pretix vulnerable to Authorization Bypass Through User-Controlled Key
Modified: 7/13/2026
HIGH7.8PyPI
GHSA-9jvx-p6mq-fw4v· CVE-2023-44464, PYSEC-2026-1801pretix allows Pillow to parse EPS files
Modified: 7/7/2026
MEDIUM5.3PyPI
GHSA-j9gq-w73w-9h6c· CVE-2023-44463, PYSEC-2023-187pretix potential IP address spoofing vulnerability
Modified: 10/21/2024
LOWPyPI
GHSA-pmjj-h5jm-vxh4· CVE-2025-14882, PYSEC-2026-1802pretix has Broken Access Control Allowing Cross-User File Access via UUID
Modified: 7/7/2026
LOWPyPI
GHSA-r2h2-g46h-8mx8· CVE-2025-14881, PYSEC-2026-1803pretix has Broken Access Control Allowing Cross-User File Access via UUID
Modified: 7/7/2026
HIGH7.5PyPI
GHSA-r76w-3wwq-jv6v· CVE-2023-27891, PYSEC-2023-42Insufficient Session Expiration in pretix
Modified: 10/21/2024
MEDIUM5.9PyPI
GHSA-r8p8-qw9w-j9qv· CVE-2026-2415, PYSEC-2026-110pretix unsafely evaluates variables in emails
Modified: 5/20/2026
MEDIUMPyPI
GHSA-wr8q-c73g-m7gp· CVE-2026-5600, PYSEC-2026-111pretix: API leaks check-in data between events of the same organizer
Modified: 6/8/2026
—PyPI
PYSEC-2023-187· CVE-2023-44463, GHSA-j9gq-w73w-9h6cModified: 6/10/2026
—PyPI
PYSEC-2023-42· CVE-2023-27891, GHSA-r76w-3wwq-jv6vModified: 6/10/2026
MEDIUM5.4PyPI
PYSEC-2024-180· CVE-2024-8113, GHSA-45rp-q25w-4426Modified: 6/10/2026
—PyPI
PYSEC-2024-253· CVE-2024-27447, GHSA-672r-97r7-vx2qModified: 6/10/2026
MEDIUM6.1PyPI
PYSEC-2025-154· CVE-2025-13742, GHSA-2mm6-624x-fqrrModified: 6/10/2026
MEDIUM5.9PyPI
PYSEC-2026-110· CVE-2026-2415, GHSA-r8p8-qw9w-j9qvModified: 6/10/2026
MEDIUM4.3PyPI
PYSEC-2026-111· CVE-2026-5600, GHSA-wr8q-c73g-m7gpModified: 6/10/2026
HIGH7.8PyPI
PYSEC-2026-1801· CVE-2023-44464, GHSA-9jvx-p6mq-fw4vpretix allows Pillow to parse EPS files
Modified: 7/7/2026
—PyPI
PYSEC-2026-1802· CVE-2025-14882, GHSA-pmjj-h5jm-vxh4pretix has Broken Access Control Allowing Cross-User File Access via UUID
Modified: 7/7/2026
—PyPI
PYSEC-2026-1803· CVE-2025-14881, GHSA-r2h2-g46h-8mx8pretix has Broken Access Control Allowing Cross-User File Access via UUID
Modified: 7/7/2026
—PyPI
PYSEC-2026-2960· CVE-2026-9712, GHSA-72p9-6vv6-gvqhpretix vulnerable to Authorization Bypass Through User-Controlled Key
Modified: 7/13/2026