CGM_Public/pretix_cgo
1
0
Fork 0
forked from CGM_Public/pretix_original
Code Pull Requests Actions Activity

upstream/2026.5.2 #19

Merged
simon merged 10 commits from upstream/2026.5.2 into master 2026-07-01 19:27:13 +00:00
Conversation 0 Commits 10 Files Changed 21
+363 -227
simon commented 2026-07-01 19:24:07 +00:00
Owner
Copy Link
Copy Source

Upstream-Merge auf v2026.5.2, gemergt mit master.

Upstream-Merge auf v2026.5.2, gemergt mit master.
simon added 9 commits 2026-07-01 19:24:07 +00:00
[SECURITY] Fix XSS in ticket layout JSON (CVE-2026-57532) f3a8ce39f1
[SECURITY] Hardening: Don't use |safe on confirm_messages e087dd39b8
[SECURITY] Fix stored XSS in ticket confirmation page (CVE-2026-13225) 71f6ade5d6
[SECURITY] Fix reflected XSS in redirection page (CVE-2026-57533) e2661f304d
[SECURITY] Disable outbound and file access for reportlab (CVE-2026-57535) 80601cc013
[SECURITY] Prevent reading of any local files in reportlab (CVE-2026-57535) 53d8aa5679
[SECURITY] Properly escape HTML tags in PDF generation (CVE-2026-57535) cdeb3609f3
Bump to 2026.5.2 7faf6cfd80
Merge branch 'master' into upstream/2026.5.2
Build Deploy email notification tool / Apply-Kubernetes-Resources (push) Successful in 1m51s
Details
04cecedffb
simon added 1 commit 2026-07-01 19:26:34 +00:00
Remove gendered language from de/de_Informal translations
Build Deploy email notification tool / Apply-Kubernetes-Resources (push) Successful in 1m41s
Details
ce2704f6fd
simon merged commit 60af7e5984 into master 2026-07-01 19:27:13 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
philipp (Philipp Kern) simon (Simon J)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: CGM_Public/pretix_cgo#19