indico vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-33046Highindico: Indico discloses local files resulting in Remote Code Execution through LaTeX injection CVE-2026-28352Mediumindico: Indico has a missing access check in the event series management API CVE-2026-25739Mediumindico: Indico Affected by Cross-Site-Scripting via material uploads CVE-2026-25738Mediumindico: Indico has Server-Side Request Forgery (SSRF) in multiple places CVE-2025-59035Mediumindico: Indico vulnerable to Cross-Site Scripting via LaTeX math code CVE-2025-59034Mediumindico: Indico may disclose unauthorized user details access via legacy API CVE-2025-53640Mediumindico: Indico vulnerability allows attackers to bulk dump user details CVE-2024-50633Mediumindico: Indico Insecure Access CVE-2024-45399Mediumindico: Indico has a Cross-Site-Scripting during account creation CVE-2023-37901Mediumindico: Indico vulnerable to Cross-Site-Scripting via confirmation prompts CVE-2021-30185Highindico: Indico Tampering with links (e.g. password reset) in sent emails GHSA-67CX-RHHQ-MFHQHighindico: High severity vulnerability that affects indico

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo