{"action":"Upgrade pretix to 2025.8.3 or later.","affected":[{"fixed":"2025.8.3","introduced":"0"},{"fixed":"2025.9.3","introduced":"2025.9.0"},{"fixed":"2025.10.1","introduced":"2025.10.0"}],"component":"pretix","cve_ids":["CVE-2025-14882"],"ecosystem":"PyPI","epss":0.00248,"exploited":false,"fixed_versions":["2025.8.3","2025.9.3","2025.10.1"],"ghsa_id":"GHSA-pmjj-h5jm-vxh4","id":"tcs_01M5KGVS7ETEKEVCQW60FZRN5V","modified_at":"2026-07-07T17:48:07.157461282Z","published_at":"2026-07-07T16:03:13.656286Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1802","https://nvd.nist.gov/vuln/detail/CVE-2025-14882","https://github.com/pretix/pretix/commit/4b5651862c57c6e384822d1d23292342126c479a","https://github.com/pretix/pretix","https://pretix.eu/about/en/blog/20251219-release-2025-10-1","https://pypi.org/project/pretix","https://github.com/advisories/GHSA-pmjj-h5jm-vxh4"],"severity":{"label":"low","score":3.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-1802","url":"https://osv.dev/vulnerability/PYSEC-2026-1802"},{"source":"nvd","source_id":"CVE-2025-14882","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14882"}],"summary":"pretix has Broken Access Control Allowing Cross-User File Access via UUID"}