—0.0PyPI
GHSA-3wg7-r7q5-r2jf· CVE-2024-50633, PYSEC-2026-1459Indico Insecure Access
Modified: 7/7/2026
package
PyPI/indico
pkg:pypi/indico
MEDIUM4.3PyPI
GHSA-4269-mcfh-cp7q· CVE-2025-59034, PYSEC-2026-1460Indico may disclose unauthorized user details access via legacy API
Modified: 7/7/2026
HIGHPyPI
GHSA-67cx-rhhq-mfhqHigh severity vulnerability that affects indico
Modified: 12/2/2024
MEDIUM4.6PyPI
GHSA-7cf7-9wrr-vrf4· CVE-2025-59035, PYSEC-2026-1461Indico vulnerable to Cross-Site Scripting via LaTeX math code
Modified: 7/7/2026
MEDIUMPyPI
GHSA-f47c-3c5w-v7p4· CVE-2026-25738, PYSEC-2026-2181Indico has Server-Side Request Forgery (SSRF) in multiple places
Modified: 7/13/2026
MEDIUM5.4PyPI
GHSA-fmqq-25x9-c6hm· CVE-2023-37901, PYSEC-2023-129Indico vulnerable to Cross-Site-Scripting via confirmation prompts
Modified: 9/23/2024
MEDIUM5.4PyPI
GHSA-jxc4-54g3-j7vp· CVE-2026-25739, PYSEC-2026-2182Indico Affected by Cross-Site-Scripting via material uploads
Modified: 7/13/2026
MEDIUMPyPI
GHSA-q28v-664f-q6wj· CVE-2025-53640, PYSEC-2026-1462Indico vulnerability allows attackers to bulk dump user details
Modified: 7/7/2026
MEDIUM6.5PyPI
GHSA-rfpp-2hgm-gp5v· CVE-2026-28352, PYSEC-2026-2183Indico has a missing access check in the event series management API
Modified: 7/13/2026
HIGHPyPI
GHSA-rm2q-f7jv-3cfp· CVE-2026-33046, PYSEC-2026-2184Indico discloses local files resulting in Remote Code Execution through LaTeX injection
Modified: 7/13/2026
MEDIUM6.1PyPI
GHSA-rrqf-w74j-24ff· CVE-2024-45399, PYSEC-2024-90Indico has a Cross-Site-Scripting during account creation
Modified: 9/25/2024
HIGH7.5PyPI
GHSA-wgpj-7c2j-vfjm· CVE-2021-30185, PYSEC-2021-18Indico Tampering with links (e.g. password reset) in sent emails
Modified: 9/23/2024
—PyPI
PYSEC-2021-18· CVE-2021-30185, GHSA-wgpj-7c2j-vfjmModified: 11/8/2023
MEDIUM5.4PyPI
PYSEC-2023-129· CVE-2023-37901, GHSA-fmqq-25x9-c6hmModified: 11/8/2023
MEDIUM6.1PyPI
PYSEC-2024-90· CVE-2024-45399, GHSA-rrqf-w74j-24ffModified: 9/25/2024
—0.0PyPI
PYSEC-2026-1459· CVE-2024-50633, GHSA-3wg7-r7q5-r2jfIndico Insecure Access
Modified: 7/7/2026
MEDIUM4.3PyPI
PYSEC-2026-1460· CVE-2025-59034, GHSA-4269-mcfh-cp7qIndico may disclose unauthorized user details access via legacy API
Modified: 7/7/2026
MEDIUM4.6PyPI
PYSEC-2026-1461· CVE-2025-59035, GHSA-7cf7-9wrr-vrf4Indico vulnerable to Cross-Site Scripting via LaTeX math code
Modified: 7/7/2026
—PyPI
PYSEC-2026-1462· CVE-2025-53640, GHSA-q28v-664f-q6wjIndico vulnerability allows attackers to bulk dump user details
Modified: 7/7/2026
MEDIUM4.3PyPI
PYSEC-2026-2181· CVE-2026-25738, GHSA-f47c-3c5w-v7p4Modified: 7/13/2026
MEDIUM5.4PyPI
PYSEC-2026-2182· CVE-2026-25739, GHSA-jxc4-54g3-j7vpModified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2026-2183· CVE-2026-28352, GHSA-rfpp-2hgm-gp5vModified: 7/13/2026
HIGH8.8PyPI
PYSEC-2026-2184· CVE-2026-33046, GHSA-rm2q-f7jv-3cfpModified: 7/13/2026