upstream/2026.5.2 #19

Merged

simon merged 10 commits from upstream/2026.5.2 into master 2026-07-01 19:27:13 +00:00

Conversation 0 Commits 10 Files Changed 21

+363 -227

simon commented 2026-07-01 19:24:07 +00:00

Owner

Copy Link

Copy Source

Upstream-Merge auf v2026.5.2, gemergt mit master.

Upstream-Merge auf v2026.5.2, gemergt mit master.

simon added 9 commits 2026-07-01 19:24:07 +00:00

[SECURITY] Fix XSS in ticket layout JSON (CVE-2026-57532) f3a8ce39f1

[SECURITY] Hardening: Don't use |safe on confirm_messages e087dd39b8

[SECURITY] Fix stored XSS in ticket confirmation page (CVE-2026-13225) 71f6ade5d6

[SECURITY] Fix reflected XSS in redirection page (CVE-2026-57533) e2661f304d

[SECURITY] Disable outbound and file access for reportlab (CVE-2026-57535) 80601cc013

[SECURITY] Prevent reading of any local files in reportlab (CVE-2026-57535) 53d8aa5679

[SECURITY] Properly escape HTML tags in PDF generation (CVE-2026-57535) cdeb3609f3

Bump to 2026.5.2 7faf6cfd80

Merge branch 'master' into upstream/2026.5.2 04cecedffb

simon added 1 commit 2026-07-01 19:26:34 +00:00

Remove gendered language from de/de_Informal translations ce2704f6fd

simon merged commit 60af7e5984 into master 2026-07-01 19:27:13 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No Label

Milestone

No items

No Milestone

Assignees

Clear assignees

philipp (Philipp Kern) simon (Simon J)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: CGM_Public/pretix_cgo#19