We have issued a security release for pretix, fixing multiple issues of "low" severity: https://pretix.eu/about/en/blog/20260929-release-2026-7-1/