{"action":"Upgrade indico to 3.3.12 or later.","affected":[{"fixed":"3.3.12","introduced":"0"}],"component":"indico","cve_ids":["CVE-2026-33046"],"ecosystem":"PyPI","epss":0.00796,"exploited":false,"fixed_versions":["3.3.12"],"ghsa_id":"GHSA-rm2q-f7jv-3cfp","id":"tcs_01M5KFY8877CAW4258DNRDWYNB","modified_at":"2026-07-13T07:26:43.762604006Z","published_at":"2026-03-23T20:43:43Z","references":["https://osv.dev/vulnerability/GHSA-rm2q-f7jv-3cfp","https://github.com/indico/indico/security/advisories/GHSA-rm2q-f7jv-3cfp","https://nvd.nist.gov/vuln/detail/CVE-2026-33046","https://github.com/indico/indico/commit/0adb70f0ed66e129361d447868f5f3eb90dc5e96","https://github.com/indico/indico/commit/1dbb12525b3de14229bf4d1ae192988068f975f6","https://github.com/indico/indico/commit/5f24d23ce9c4b0e4b68b3d0b58987a948fc57c8a","https://github.com/indico/indico/commit/fb169ced710c30cf792ce4b9f48688db0633cfd8","https://github.com/indico/indico","https://github.com/indico/indico/releases/tag/v3.3.12"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-rm2q-f7jv-3cfp","url":"https://osv.dev/vulnerability/GHSA-rm2q-f7jv-3cfp"},{"source":"nvd","source_id":"CVE-2026-33046","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33046"}],"summary":"Indico discloses local files resulting in Remote Code Execution through LaTeX injection"}