CVE-2023-44464High· 7.8▾ Twilightpretix allows Pillow to parse EPS files
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.3%
0.3% → 0.3%
pretix before 2023.7.2 allows Pillow to parse EPS files.
pretix < 2023.7.2Upgrade to a patched release:
pretix 2023.7.2Connected by shared product, vendor, weakness, or advisory.
CVE-2025-14881LowMultiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.
CVE-2025-14882Lowpretix has Broken Access Control Allowing Cross-User File Access via UUID
CVE-2026-9712Lowpretix vulnerable to Authorization Bypass Through User-Controlled Key
CVE-2026-101273Medium· 5.3Giftcard enumeration
CVE-2026-101274Medium· 6.9When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type` requested in an authorization request against the configured grant type of the S…
CVE-2026-101272Low· 2.3Incorrect session validation for API-created shredder exports