PyPI/indico CVE-2026-107397: medium 4.4, EPSS 0.23%

Indico: Cross-Site-Scripting in minutes editor

Action: Upgrade indico to 3.3.13 or later.

pip install indico==3.3.13

Affected

Fixed versions

Sources

• osv: GHSA-cw24-x4mj-fw3q
• https://github.com/indico/indico/security/advisories/GHSA-cw24-x4mj-fw3q
• https://nvd.nist.gov/vuln/detail/CVE-2026-107397
• https://github.com/indico/indico/pull/7619
• https://github.com/indico/indico/commit/d4c8c7127176efa4cb53c64119ca8ee2b551be18
• https://github.com/indico/indico
• https://github.com/indico/indico/releases/tag/v3.3.13

CVE-2026-107397 · published 2026-10-08T22:09:45Z · modified 2026-10-15T14:56:21.251667589Z · JSON