Pretix vulnerabilities
40 CVEs and advisories name Pretix as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-5600A new API endpoint introduced in pretix 2025 that is supposed to return all check-in events of a specific event in fact returns all check-
- CVE-2026-5599API allows deletion of users of other instance
- CVE-2026-4982Unauthorized access to chat contents
- CVE-2026-2452Unsafe variable evaluation in email templates
- CVE-2026-2451Unsafe variable evaluation in email templates
- CVE-2026-2415Unsafe variable evaluation in email templates
- CVE-2025-14881Insecure direct object reference
- CVE-2025-14882Insecure direct object reference
- CVE-2025-13742Limited HTML injection in emails
- CVE-2024-8113Stored XSS in Placeholder Samples in Mail Preview