Login Request a demo
IN
Product
indico
by indico · last CVE Oct 13, 2026
13
CVEs
0
On KEV
8.8
Max CVSS
5
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 0High 1Medium 11Low 1
Severity
All severities13Critical0High1Medium11Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add indico to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33046
8.8
1%
Mar 23
Indico discloses local files resulting in Remote Code Execution through LaTeX injection
Affected: < 3.3.12
CVE-2026-107394
6.8
0%
Oct 8
Indico: Incomplete Server-Side Request Forgery (SSRF) check
Affected: < 3.3.13
CVE-2026-28352
6.5
0%
Feb 27
Indico missing access check in event series management API
Affected: < 3.3.11
CVE-2025-53640
6.5
1%
Jul 14
Indico vulnerable to user enumeration via API endpoint
Affected: >= 2.2, < 3.3.7
CVE-2024-45399
6.1
0%
Sep 4
Indico has a Cross-Site-Scripting during account creation
Affected: < 3.3.4
CVE-2026-107396
5.4
0%
Oct 8
Indico: Cross-Site-Scripting in link fields
Affected: < 3.3.13
CVE-2026-25739
5.4
0%
Feb 19
Indico affected by Cross-Site-Scripting via material uploads
Affected: < 3.3.10
CVE-2025-59035
5.4
0%
Sep 10
Indico vulnerable to Cross-Site Scripting via LaTeX math code
Affected: < 3.3.8
CVE-2026-107397
4.4
0%
Oct 8
Indico: Cross-Site-Scripting in minutes editor
Affected: < 3.3.13
CVE-2026-107395
4.3
0%
Oct 8
Indico: Missing access check in legacy session export API
Affected: < 3.3.13
CVE-2026-25738
4.3
0%
Feb 19
Indico has Server-Side Request Forgery (SSRF) in multiple places
Affected: < 3.3.10
CVE-2025-59034
4.3
0%
Sep 10
Indico may disclose unauthorized user details access via legacy API
Affected: < 3.3.8
CVE-2026-108388
3.5
0%
Oct 13
Indico legacy contribution export cache poisoning discloses restricted metadata
Affected: >= 3.3.3, < 3.3.14
Showing 13