CVE-2023-44464

pretix before 2023.7.2 allows Pillow to parse EPS files...

CVE-2023-27891

rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4.15.1, 4.16.1, and 4.17.1...

Improper Input Validation

pretix is vulnerable to Improper Input Validation. The vulnerability is due to improper validation of files uploaded by users, which could allow attackers to upload malicious files and execute arbitrary code...

pretix mishandles file validation

pretix before 2024.1.1 mishandles file validation...