{"action":"Upgrade pretix to 2026.4.2 or later.","affected":[{"fixed":"2026.4.2","introduced":"0"}],"component":"pretix","cve_ids":["CVE-2026-9712"],"ecosystem":"PyPI","epss":0.00219,"exploited":false,"fixed_versions":["2026.4.2"],"ghsa_id":"GHSA-72p9-6vv6-gvqh","id":"tcs_01M5KH2KHZEWM0QFYKP2D3XTV2","modified_at":"2026-07-13T16:33:06.704465567Z","published_at":"2026-07-13T15:19:12.644765Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2960","https://nvd.nist.gov/vuln/detail/CVE-2026-9712","https://github.com/pretix/pretix","https://pretix.eu/about/en/blog/20260527-release-2026-4-2","https://pypi.org/project/pretix","https://github.com/advisories/GHSA-72p9-6vv6-gvqh"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-2960","url":"https://osv.dev/vulnerability/PYSEC-2026-2960"}],"summary":"pretix vulnerable to Authorization Bypass Through User-Controlled Key"}