pretix Venueless vulnerabilities

Newest CVEs

• CVE-2026-82838

  Default webserver configuration with incorrect CSP

  pretix · venueless

  Medium6.4
• CVE-2026-13350

  Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create.

  pretix · Venueless

  Low2.3
• CVE-2026-12863

  Open redirect

  pretix · Venueless

  Medium5.1
• CVE-2026-12862

  XLSX formula injection in exports

  pretix · Venueless

  Medium5.1
• CVE-2026-5599

  API allows deletion of users of other instance

  pretix · Venueless

  High7.3
• CVE-2026-4982

  Unauthorized access to chat contents

  pretix · Venueless

  High7.3