CVE-2026-101274

When pretix is used as the identity provider in a Single-Sign-On SSO setup for customer accounts, the system did not properly validate the responsetype requested in an authorization request against the configured grant type of the SSO client. This means that if an SSO client was configured to onl...

CVE-2026-101274

When pretix is used as an identity provider in a Single-Sign-On (SSO) setup, the system fails to properly validate the response_type requested in an authorization request against the configured grant type of the SSO client. Specifically, a client configured to only allow the code response type co...

EUVD-2026-111998

When pretix is used as the identity provider in a Single-Sign-On SSO setup for customer accounts, the system did not properly validate the responsetype requested in an authorization request against the configured grant type of the SSO client. This means that if an SSO client was configured to onl...

CVE-2026-101274

When pretix is used as the identity provider in a Single-Sign-On SSO setup for customer accounts, the system did not properly validate the responsetype requested in an authorization request against the configured grant type of the SSO client. This means that if an SSO client was configured to onl...