https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T21:04:17.958128+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-14881 CVE-2025-14881 — Insecure direct object reference 2026-10-18T21:04:17.959712+00:00

Affected: pretix

Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.

 https://cve.radiocsirt.org/vuln/pysec-2026-1803 PYSEC-2026-1803 — pretix has Broken Access Control Allowing Cross-User File Access via UUID 2026-10-18T21:04:17.959761+00:00

Affected: PyPI: pretix

Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.