pretix@2026.4.4
Reinventing presales, one ticket at a time
latest version
2026.6.0
latest non vulnerable version
first published
9 years ago
latest version published
18 days ago
licenses detected
- [1.0.0b1,3.18.0); [4.19.0,)
Direct Vulnerabilities
Known vulnerabilities in the pretix package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
pretix is a Reinventing presales, one ticket at a time Affected versions of this package are vulnerable to Improper Input Validation via improper validation of session parameters in the payment integration plugins and the use of shared cryptographic keys and salts across unrelated features. An attacker can gain unauthorized access to any user account by injecting specially crafted, cryptographically signed session parameters and exploiting the impersonation functionality. This is only exploitable if the attacker has access to at least one event in the backend. How to fix Improper Input Validation? Upgrade | [4.14.0,2026.3.5.post1)[2026.4.0,2026.4.5)[2026.5.0,2026.5.3) |