Skip to content
OpenAdvisories

Vendor

pretalx

2 known vulnerabilities.

Products

pretalx 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-41426

    pretalx: Email injection via unescaped user-controlled placeholders in pretalx mail templates

    pretalx is a conference planning tool. Prior to 2026.1.0, an unauthenticated attacker can send arbitrary HTML-rendered emails from a pretalx instance's configured sender address by embedding malformed HTML or markdown link syntax in a user-controlled template…

    pretalx pretalx pretalx PyPI