{"action":"Upgrade pretix to 2025.8.3 or later.","affected":[{"fixed":"2025.8.3","introduced":"0"},{"fixed":"2025.9.3","introduced":"2025.9.0"},{"fixed":"2025.10.1","introduced":"2025.10.0"}],"component":"pretix","cve_ids":["CVE-2025-14881"],"ecosystem":"PyPI","epss":0.00248,"exploited":false,"fixed_versions":["2025.8.3","2025.9.3","2025.10.1"],"ghsa_id":"GHSA-r2h2-g46h-8mx8","id":"tcs_01M5KGVSCF1TY6W7M3QEREM37Z","modified_at":"2026-07-07T17:48:07.166967701Z","published_at":"2026-07-07T16:03:13.727414Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1803","https://nvd.nist.gov/vuln/detail/CVE-2025-14881","https://github.com/pretix/pretix/commit/4b5651862c57c6e384822d1d23292342126c479a","https://github.com/pretix/pretix","https://pretix.eu/about/en/blog/20251219-release-2025-10-1","https://pypi.org/project/pretix","https://github.com/advisories/GHSA-r2h2-g46h-8mx8"],"severity":{"label":"low","score":3.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-1803","url":"https://osv.dev/vulnerability/PYSEC-2026-1803"},{"source":"nvd","source_id":"CVE-2025-14881","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-14881"}],"summary":"pretix has Broken Access Control Allowing Cross-User File Access via UUID"}