PyPI/pretix CVE-2025-13742: medium 6.1, EPSS 0.18%
Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name} is used in an email template, it will be replaced with the buyer's name for the final em
Action: Upgrade pretix to 2025.7.2 or later.
pip install pretix==2025.7.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 2025.7.2 | - |
Fixed versions
| 2025.7.2 |
Sources
- osv: PYSEC-2025-154
- https://pretix.eu/about/en/blog/20251126-release-2025-9-1/
- https://github.com/advisories/GHSA-2mm6-624x-fqrr
CVE-2025-13742 · published · modified · JSON