Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37281?format=api",
    "vulnerability_id": "VCID-gw4m-xrzv-3fah",
    "summary": "A new API endpoint introduced in pretix 2025 that is supposed to \nreturn all check-in events of a specific event in fact returns all \ncheck-in events belonging to the respective organizer. This allows an \nAPI consumer to access information for all other events under the same \norganizer, even those they should not have access to.\n\n\nThese records contain information on the time and result of every ticket scan as well as the ID of the matched ticket. Example:\n\n\n{\n  \"id\": 123,\n  \"successful\": true,\n  \"error_reason\": null,\n  \"error_explanation\": null,\n  \"position\": 321,\n  \"datetime\": \"2020-08-23T09:00:00+02:00\",\n  \"list\": 456,\n  \"created\": \"2020-08-23T09:00:00+02:00\",\n  \"auto_checked_in\": false,\n  \"gate\": null,\n  \"device\": 1,\n  \"device_id\": 1,\n  \"type\": \"entry\"\n}\n\n\n\nAn unauthorized user usually has no way to match these IDs (position) back to individual people.",
    "aliases": [
        {
            "alias": "CVE-2026-5600"
        },
        {
            "alias": "PYSEC-2026-111"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/49514?format=api",
            "purl": "pkg:pypi/pretix@2026.1.2",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pretix@2026.1.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/49515?format=api",
            "purl": "pkg:pypi/pretix@2026.2.1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pretix@2026.2.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/49516?format=api",
            "purl": "pkg:pypi/pretix@2026.3.1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pretix@2026.3.1"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/47623?format=api",
            "purl": "pkg:pypi/pretix@2025.10.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-d994-7d7d-n7hg"
                },
                {
                    "vulnerability": "VCID-gw4m-xrzv-3fah"
                },
                {
                    "vulnerability": "VCID-jh6j-yq6e-cuad"
                },
                {
                    "vulnerability": "VCID-r8k9-mhm3-jyb6"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pretix@2025.10.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/47624?format=api",
            "purl": "pkg:pypi/pretix@2025.10.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-gw4m-xrzv-3fah"
                },
                {
                    "vulnerability": "VCID-jh6j-yq6e-cuad"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pretix@2025.10.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/47625?format=api",
            "purl": "pkg:pypi/pretix@2025.10.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-gw4m-xrzv-3fah"
                },
                {
                    "vulnerability": "VCID-jh6j-yq6e-cuad"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pretix@2025.10.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/47626?format=api",
            "purl": "pkg:pypi/pretix@2026.1.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-gw4m-xrzv-3fah"
                },
                {
                    "vulnerability": "VCID-jh6j-yq6e-cuad"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pretix@2026.1.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/47627?format=api",
            "purl": "pkg:pypi/pretix@2026.1.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-gw4m-xrzv-3fah"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pretix@2026.1.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/49512?format=api",
            "purl": "pkg:pypi/pretix@2026.2.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-gw4m-xrzv-3fah"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pretix@2026.2.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/49513?format=api",
            "purl": "pkg:pypi/pretix@2026.3.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-gw4m-xrzv-3fah"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/pretix@2026.3.0"
        }
    ],
    "references": [
        {
            "reference_url": "https://pretix.eu/about/en/blog/20260408-release-2026-3-1/",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "4.3",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
                }
            ],
            "url": "https://pretix.eu/about/en/blog/20260408-release-2026-3-1/"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "4.3 - 4.3",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gw4m-xrzv-3fah"
}