CGM_Public/pretix_cgo
1
0
Fork 0
forked from CGM_Public/pretix_original
Code Pull Requests Actions Activity

upstream/2026.5.2 #19

Merged
simon merged 10 commits from upstream/2026.5.2 into master 2026-07-01 19:27:13 +00:00
Conversation 0 Commits 10 Files Changed 21
+363 -227
10 Commits
Author SHA1 Message Date
TechuserUpdatechecker ce2704f6fd Remove gendered language from de/de_Informal translations
Build Deploy email notification tool / Apply-Kubernetes-Resources (push) Successful in 1m41s
Details
2026-07-01 21:26:32 +02:00
TechuserUpdatechecker 04cecedffb Merge branch 'master' into upstream/2026.5.2
Build Deploy email notification tool / Apply-Kubernetes-Resources (push) Successful in 1m51s
Details
2026-07-01 21:21:43 +02:00
Raphael Michel 7faf6cfd80 Bump to 2026.5.2 2026-06-25 16:40:44 +02:00
Raphael Michel cdeb3609f3 [SECURITY] Properly escape HTML tags in PDF generation (CVE-2026-57535) 2026-06-25 16:40:28 +02:00
Raphael MichelandRaphael Michel 53d8aa5679 [SECURITY] Prevent reading of any local files in reportlab (CVE-2026-57535) 2026-06-25 16:40:00 +02:00
Raphael MichelandRaphael Michel 80601cc013 [SECURITY] Disable outbound and file access for reportlab (CVE-2026-57535) 2026-06-25 16:40:00 +02:00
Mira WellerandRaphael Michel e2661f304d [SECURITY] Fix reflected XSS in redirection page (CVE-2026-57533) 2026-06-25 16:40:00 +02:00
Mira WellerandRaphael Michel 71f6ade5d6 [SECURITY] Fix stored XSS in ticket confirmation page (CVE-2026-13225) 2026-06-25 16:40:00 +02:00
Mira WellerandRaphael Michel e087dd39b8 [SECURITY] Hardening: Don't use |safe on confirm_messages 2026-06-25 16:40:00 +02:00
Mira WellerandRaphael Michel f3a8ce39f1 [SECURITY] Fix XSS in ticket layout JSON (CVE-2026-57532) 2026-06-25 16:40:00 +02:00