Pretix security vulnerability

Versions prior to pretix 2026.6.4, versions 2026.7.0 through 2026.7.3, and versions 2026.8.0 through 2026.8.1 contain a security vulnerability. This vulnerability arises from improper functioning of the mechanism that binds files generated during the shredding process to authentication methods...

CVE-2026-101269

A flaw in the mechanism binding API-uploaded files to specific authentication methods allows the same session token to be used for all token-based API users. Although the protection mechanism is rendered useless , the documents state there is virtually no risk because the uploaded files are refer...