{"action":"Upgrade pretix to 2026.4.2 or later.","affected":[{"fixed":"2026.4.2","introduced":"0"}],"component":"pretix","cve_ids":["CVE-2026-9712"],"ecosystem":"PyPI","epss":0.00219,"exploited":false,"fixed_versions":["2026.4.2"],"ghsa_id":"GHSA-72p9-6vv6-gvqh","id":"tcs_01M5KF4KFD3Y1RDSP3XXC1KNMZ","modified_at":"2026-07-13T16:43:28.507528215Z","published_at":"2026-05-27T15:33:28Z","references":["https://osv.dev/vulnerability/GHSA-72p9-6vv6-gvqh","https://nvd.nist.gov/vuln/detail/CVE-2026-9712","https://github.com/pretix/pretix","https://pretix.eu/about/en/blog/20260527-release-2026-4-2"],"severity":{"label":"low","score":3.8},"sources":[{"source":"osv","source_id":"GHSA-72p9-6vv6-gvqh","url":"https://osv.dev/vulnerability/GHSA-72p9-6vv6-gvqh"},{"source":"nvd","source_id":"CVE-2026-9712","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-9712"}],"summary":"pretix vulnerable to Authorization Bypass Through User-Controlled Key"}