Skip to content
OpenAdvisories

Vendor

indico

14 known vulnerabilities.

Products

indico 14
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-33046

    Indico discloses local files resulting in Remote Code Execution through LaTeX injection

    Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In versions prior to 3.3.12, due to vulnerabilities in TeXLive and obscure LaTeX syntax that allowed circumventing Indico's LaTeX sanitizer, it is…

    indico indico indico PyPI