| Indico: Cross-Site-Scripting in minutes editorCVE-2026-107397 · GHSA-CW24-X4MJ-FW3QVersion ranges need review. |
indico |
PyPI |
Medium
|
Fix reported |
|
| Indico: Cross-Site-Scripting in link fieldsCVE-2026-107396 · GHSA-C4WC-GGRJ-JG9VVersion ranges need review. |
indico |
PyPI |
Medium
|
Fix reported |
|
| Indico: Missing access check in legacy session export APICVE-2026-107395 · GHSA-6P4F-J8J6-463QVersion ranges need review. |
indico |
PyPI |
Medium
|
Fix reported |
|
| Indico: Incomplete Server-Side Request Forgery (SSRF) checkCVE-2026-107394 · GHSA-2V95-H47V-G4X9Version ranges need review. |
indico |
PyPI |
Medium
|
Fix reported |
|
| Indico has Server-Side Request Forgery (SSRF) in multiple placesCVE-2026-25738 · GHSA-F47C-3C5W-V7P4Version ranges need review. |
indico |
PyPI |
Medium
|
Fix reported |
|
| Indico Affected by Cross-Site-Scripting via material uploadsCVE-2026-25739 · GHSA-JXC4-54G3-J7VPVersion ranges need review. |
indico |
PyPI |
Medium
|
Fix reported |
|
| Indico discloses local files resulting in Remote Code Execution through LaTeX injection CVE-2026-33046 · GHSA-RM2Q-F7JV-3CFPVersion ranges need review. |
indico |
PyPI |
High
|
Fix reported |
|
| Indico has a missing access check in the event series management APICVE-2026-28352 · GHSA-RFPP-2HGM-GP5VVersion ranges need review. |
indico |
PyPI |
Medium
|
Fix reported |
|
| Indico vulnerability allows attackers to bulk dump user detailsCVE-2025-53640 · GHSA-Q28V-664F-Q6WJVersion ranges need review. |
indico |
PyPI |
Medium
|
Fix reported |
|
| Indico vulnerable to Cross-Site Scripting via LaTeX math codeCVE-2025-59035 · GHSA-7CF7-9WRR-VRF4Version ranges need review. |
indico |
PyPI |
Medium
|
Fix reported |
|
| Indico may disclose unauthorized user details access via legacy APICVE-2025-59034 · GHSA-4269-MCFH-CP7QVersion ranges need review. |
indico |
PyPI |
Medium
|
Fix reported |
|
| Indico Insecure AccessCVE-2024-50633 · GHSA-3WG7-R7Q5-R2JFVersion ranges need review. |
indico |
PyPI |
Medium
|
Fix reported |
|
| High severity vulnerability that affects indicoGHSA-67CX-RHHQ-MFHQ |
indico |
PyPI |
High
|
Fix reported |
|
| Indico has a Cross-Site-Scripting during account creationCVE-2024-45399 · GHSA-RRQF-W74J-24FFVersion ranges need review. |
indico |
PyPI |
Medium
|
Fix reported |
|
| Indico vulnerable to Cross-Site-Scripting via confirmation promptsCVE-2023-37901 · GHSA-FMQQ-25X9-C6HMVersion ranges need review. |
indico |
PyPI |
Medium
|
Fix reported |
|
| Indico Tampering with links (e.g. password reset) in sent emailsCVE-2021-30185 · GHSA-WGPJ-7C2J-VFJMVersion ranges need review. |
indico |
PyPI |
High
|
Fix reported |
|
