GHSA-rfpp-2hgm-gp5v
Medium · 6.5CVSS
6.5
EPSS
—
Published
Mar 1, 2026
CISA due date
—
The record
Indico has a missing access check in the event series management API
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | indico | 0 | 3.3.11 |
Related vulnerabilities
- CVE-2026-28352 Indico is an event management system that uses Flask-Multipass, a multi-backend… Same vulnerability
- CVE-2026-25739 Indico is an event management system that uses Flask-Multipass, a multi-backend… Also affects indico
- CVE-2026-25738 Indico is an event management system that uses Flask-Multipass, a multi-backend… Also affects indico
- GHSA-jxc4-54g3-j7vp Indico Affected by Cross-Site-Scripting via material uploads Also affects indico
- GHSA-f47c-3c5w-v7p4 Indico has Server-Side Request Forgery (SSRF) in multiple places Also affects indico
- CVE-2026-114636 Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes… CWE-306
- CVE-2026-112104 A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. CWE-306
- CVE-2026-53714 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or… CWE-306