PyPI/indico CVE-2026-107394: medium 6.8, EPSS 0.34%

Indico: Incomplete Server-Side Request Forgery (SSRF) check

Action: Upgrade indico to 3.3.13 or later.

pip install indico==3.3.13

Affected

Fixed versions

Sources

• osv: PYSEC-2026-4225
• https://github.com/indico/indico/security/advisories/GHSA-2v95-h47v-g4x9
• https://nvd.nist.gov/vuln/detail/CVE-2026-107394
• https://github.com/indico/indico/pull/7573
• https://github.com/indico/indico/commit/44540e70ab4e20a12f14ddba5218a33749a86736
• https://github.com/indico/indico
• https://github.com/indico/indico/releases/tag/v3.3.13
• https://pypi.org/project/indico
• https://github.com/advisories/GHSA-2v95-h47v-g4x9

CVE-2026-107394 · published 2026-10-15T10:22:54.067614Z · modified 2026-10-15T14:45:05.349809704Z · JSON