pretix vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20253
3. 202632

Newest CVEs

• CVE-2026-101272

  Incorrect session validation for API-created shredder exports

  pretix · pretix

  Low2.3
• CVE-2026-101274

  When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type`…

  pretix · pretix

  Medium6.9
• CVE-2026-101273

  Giftcard enumeration

  pretix · pretix

  Medium5.3
• CVE-2026-101271

  OAuth credentials not disabled when application is disabled

  pretix · pretix

  Low2.1
• CVE-2026-101270

  HTML injection

  pretix · pretix

  Low2.1
• CVE-2026-101269

  Incorrect session validation for API-uploaded files

  pretix · pretix

  Low2.3
• CVE-2026-101268

  Customer session fixation

  pretix · pretix

  Low1.7
• CVE-2026-101267

  Revenue information leak

  pretix · pretix

  Low2.7
• CVE-2026-101266

  Checkout validation bypass

  pretix · pretix

  Low1.3
• CVE-2026-82838

  Default webserver configuration with incorrect CSP

  pretix · venueless

  Medium6.4