Indico vulnerabilities
We track 2 vulnerabilities in Indico products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Indico vulnerabilities
- 7.1 High severity
indico: Relative Path Traversal
Indico is a feature-rich event management system. Prior to version 3.3.14, due to a path traversal vulnerability when building an "offline copy" of an event, a malicious event manager has the ability to retrieve the content of any local file that's readable by
- 8.8 High severity
indico: Improper Limitation of a Pathname to a Restricted Directory
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In versions prior to 3.3.12, due to vulnerabilities in TeXLive and obscure LaTeX syntax that allowed circumventing Indico's LaTeX sanitizer, it is