pretix: API leaks check-in data between events of the same organizer (CVE-2026-5600) | HOL Guard CVE