CVE-2026-2415

Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when name is used in an email template, it will be replaced with the buyer's name for the final email. This mechanism contained two security-relevant bugs: It was possible to exfiltrate information...

EUVD-2023-2480

Malicious code in bioql PyPI...

PYSEC-2024-253

pretix before 2024.1.1 mishandles file validation...

GHSA-9JVX-P6MQ-FW4V pretix allows Pillow to parse EPS files

pretix before 2023.7.2 allows Pillow to parse EPS files...

CVE-2023-44464

pretix before 2023.7.2 allows Pillow to parse EPS files...

CVE-2023-44464

pretix before 2023.7.2 allows Pillow to parse EPS files...