—
PYSEC-2021-18
Quick fix
PYSEC-2021-18 — indico: upgrade to the fixed version with the command below.
pip install --upgrade 'indico>=2.3.4'Details
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link.
Are you affected?
Enter the version of the package you're using.