GHSA-f47c-3c5w-v7p4
NoneCVSS
—
EPSS
—
Published
Feb 17, 2026
CISA due date
—
The record
Indico has Server-Side Request Forgery (SSRF) in multiple places
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | indico | 0 | 3.3.10 |
Related vulnerabilities
- CVE-2026-25738 Indico is an event management system that uses Flask-Multipass, a multi-backend… Same vulnerability
- GHSA-rfpp-2hgm-gp5v Indico has a missing access check in the event series management API Also affects indico
- CVE-2026-28352 Indico is an event management system that uses Flask-Multipass, a multi-backend… Also affects indico
- CVE-2026-25739 Indico is an event management system that uses Flask-Multipass, a multi-backend… Also affects indico
- GHSA-jxc4-54g3-j7vp Indico Affected by Cross-Site-Scripting via material uploads Also affects indico
- CVE-2026-53613 util-linux is a random collection of Linux utilities. CWE-367
- CVE-2026-53612 util-linux is a random collection of Linux utilities. CWE-367
- CVE-2026-67693 An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via… CWE-367