VulertSecurity VulertSecurity

Vulnerability Database · PyPI · pretix · Version

pretix 4.8.0

4.8.0 is affected by 15 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to. The upgrade Vulert recommends: 2026.8.0.

Critical 0 High 3 Medium 4 Low 5 Unrated 3

All pretix versions & vulnerabilities → Search the database for this package →
Released 31 Mar 2022 Licence non-standard Also known from other sources 0 Newer releases 206 Database updated 23/Oct/2026

Release and licence data published by PyPI. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

pretix 4.8.0 vulnerabilities

15 vulnerabilities cover pretix 4.8.0. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2023-44464: pretix Vulnerability Allowing Pillow to Parse EPS Files 7.8 high 2023.7.2 07 Jul 2026
CVE-2023-44464: pretix allows Pillow to parse EPS files 7.8 high 2023.7.2 29 Sep 2023
CVE-2025-13742: pretix Email Template Vulnerability Allows Phishing via HTML Injection 6.1 medium 2025.7.2 27 Nov 2025
CVE-2024-8113: Stored XSS Vulnerability in pretix Allows Malicious HTML Injection 5.4 medium 2024.7.1 23 Aug 2024
CVE-2023-44463: pretix potential IP address spoofing vulnerability 5.3 medium 2023.7.1 02 Oct 2023
CVE-2026-9712: pretix Authorization Bypass Through User-Controlled Key 3.8 low 2026.4.2 13 Jul 2026
CVE-2025-14882: pretix Broken Access Control Allows Cross-User File Access via UUID 3.8 low 2025.8.3 07 Jul 2026
CVE-2025-14881: pretix Broken Access Control Allows Cross-User File Access via UUID 3.8 low 2025.8.3 07 Jul 2026
CVE-2026-9712: pretix Authorization Bypass Through User-Controlled Key Vulnerability 3.8 low 2026.4.2 27 May 2026
CVE-2025-13742: pretix Email Content Injection Vulnerability 2.4 low 2025.7.3 27 Nov 2025
CVE-2024-8113: pretix Stored Cross-site Scripting Vulnerability N/A high 2024.7.1 23 Aug 2024
File Validation Issue in pretix N/A medium 2024.1.1 26 Feb 2024
CVE-2024-27447: Vulnerability in pretix Leading to File Validation Issues N/A unrated 2024.1.1 26 Feb 2024
CVE-2023-44463: Open Redirect Vulnerability in pretix N/A unrated ccdce2ccb8207b82501af3c03f50abc0f819b469 02 Oct 2023
CVE-2023-27891: OAuth Application Authorization Bypass in pretix N/A unrated 4.17.1 06 Mar 2023

Looking for another version, or everything Vulert holds for pretix?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About pretix 4.8.0

Is pretix 4.8.0 vulnerable?

Yes. 15 vulnerabilities in the Vulert database cover pretix 4.8.0: 0 critical, 3 high, 4 medium and 5 low, plus 3 not yet rated. The upgrade Vulert recommends is 2026.8.0, and each entry above names the fixed version to move to.

Which version of pretix should I use instead of 4.8.0?

2026.8.0 is the version Vulert recommends for this release line. The version table on the package page lists every release with the vulnerabilities recorded against it.

Is 4.8.0 the latest release of pretix?

No. 4.8.0 was published 31 Mar 2022, and newer releases exist. Newer is not automatically safer — the version table on the package page shows what each release carries.

How do I monitor pretix for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the pretix version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.