pretix vulnerabilities
CVEs whose affected-version data names the pretix package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-9712Lowpretix vulnerable to Authorization Bypass Through User-Controlled Key
pretix vulnerable to Authorization Bypass Through User-Controlled Key
▾ Sunlitpretix · pretixEPSS 0.22%via OSV
CVE-2025-14881Lowpretix has Broken Access Control Allowing Cross-User File Access via UUID
pretix has Broken Access Control Allowing Cross-User File Access via UUID
▾ Sunlitpretix · pretixEPSS 0.25%via OSV
CVE-2025-14882Lowpretix has Broken Access Control Allowing Cross-User File Access via UUID
pretix has Broken Access Control Allowing Cross-User File Access via UUID
▾ Sunlitpretix · pretixEPSS 0.25%via OSV
CVE-2023-44464High· 7.8pretix allows Pillow to parse EPS files
pretix allows Pillow to parse EPS files
▾ Twilightpretix · pretixEPSS 0.30%via OSV