← All credits
Pratik Karan
3 vulnerability records and advisories credit this contributor.
CVE-2026-5600
A new API endpoint introduced in pretix 2025 that is supposed to
return all check-in events of a specific event in fact returns all
check-in events belonging to the respective organizer. This allows an
API consumer to access information for all other e
CVE-2026-5599
API allows deletion of users of other instance
CVE-2026-4982
Unauthorized access to chat contents