Open Redirect in Pretix Venueless

CVE-2026-12863

An unvalidated redirect was contained in Venueless' social login functionality and could be exploited for phishing using trusted domains.

Vulnerability class: Open Redirect

EPSS: 0.004 (27.7th percentile) — read the EPSS interpretation.