CVE-2023-44464: pretix allows Pillow to parse EPS files

September 29, 2023

pretix before 2023.7.2 allows Pillow to parse EPS files.

References

github.com/advisories/GHSA-9jvx-p6mq-fw4v
github.com/pretix/pretix/commit/8583bfb7d97263e9e923ad5d7f123ca1cadc8f2e
github.com/pretix/pretix/compare/v2023.7.1...v2023.7.2
github.com/pretix/pretix/tags
nvd.nist.gov/vuln/detail/CVE-2023-44464
pretix.eu/about/en/ticketing

Code Behaviors & Features

Detect and mitigate CVE-2023-44464 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →