Skip to content
OpenAdvisories

Package · PyPI

indico

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.7
    CVE-2026-33046

    Indico discloses local files resulting in Remote Code Execution through LaTeX injection

    Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In versions prior to 3.3.12, due to vulnerabilities in TeXLive and obscure LaTeX syntax that allowed circumventing Indico's LaTeX sanitizer, it is…

    indico indico indico PyPI
  • High 7.5
    CVE-2021-30185

    Indico Tampering with links (e.g. password reset) in sent emails

    CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link.

    indico PyPI
  • High —
    GHSA-67cx-rhhq-mfhq

    High severity vulnerability that affects indico

    ## Local file disclosure through LaTeX injection ### Impact An external audit of the Indico codebase has discovered a vulnerability in Indico's LaTeX sanitization code, which could have malicious users to run unsafe LaTeX commands on the server. Such commands…

    indico PyPI