indico vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20241
3. 20253
4. 20269

Newest CVEs

• CVE-2026-108388

  Indico legacy contribution export cache poisoning discloses restricted metadata

  indico · indico

  Low3.5
• CVE-2026-107397

  Indico: Cross-Site-Scripting in minutes editor

  indico · indico

  Medium4.4
• CVE-2026-107396

  Indico: Cross-Site-Scripting in link fields

  indico · indico

  Medium5.4
• CVE-2026-107395

  Indico: Missing access check in legacy session export API

  indico · indico

  Medium4.3
• CVE-2026-107394

  Indico: Incomplete Server-Side Request Forgery (SSRF) check

  indico · indico

  Medium6.8
• CVE-2026-33046

  Indico discloses local files resulting in Remote Code Execution through LaTeX injection

  indico · indico

  High7.7
• CVE-2026-28352

  Indico missing access check in event series management API

  indico · indico

  Medium6.5
• CVE-2026-25739

  Indico affected by Cross-Site-Scripting via material uploads

  indico · indico

  Medium5.4
• CVE-2026-25738

  Indico has Server-Side Request Forgery (SSRF) in multiple places

  indico · indico

  Medium6.9
• CVE-2025-59035

  Indico vulnerable to Cross-Site Scripting via LaTeX math code

  indico · indico

  Medium4.6