HIGH7.8
PYSEC-2026-1801
pretix allows Pillow to parse EPS files
Quick fix
PYSEC-2026-1801 — pretix: upgrade to the fixed version with the command below.
pip install --upgrade 'pretix>=2023.7.2'Details
pretix before 2023.7.2 allows Pillow to parse EPS files.
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-44464[ADVISORY]
- https://github.com/pretix/pretix/commit/8583bfb7d97263e9e923ad5d7f123ca1cadc8f2e[WEB]
- https://github.com/pretix/pretix[PACKAGE]
- https://github.com/pretix/pretix/compare/v2023.7.1...v2023.7.2[WEB]
- https://github.com/pretix/pretix/tags[WEB]
- https://pretix.eu/about/de/blog/20230912-release-2023-7-2[WEB]
- https://pretix.eu/about/en/ticketing[WEB]
- https://pypi.org/project/pretix[PACKAGE]
- https://github.com/advisories/GHSA-9jvx-p6mq-fw4v[ADVISORY]