indico

Indico is a feature-rich open source event management system made at CERN, the place where the Web was born. It is for event organizers, teams, and organizations that need software dedicated to managing events. CERN is the named maker, giving the program a concrete origin connected with the birthplace of the Web. Indico stays within a clearly defined software category instead of serving as a tool for every kind of work. That focus is also its honest limitation: Indico is an event management system, not a general-purpose program for tasks unrelated to events. Organizations should choose it for that defined role, while anyone seeking software for unrelated work will need a program aimed at a different purpose and audience altogether. No specific paid product is known as its direct replacement.

# :warning: Security fixes - Fix an incorrect access check in the legacy contribution export API that could leak extra contribution metadata through cache poisoning ([GHSA-p9vj-86c7-h7q3](https://github.com/indico/indico/security/advisories/GHSA-p9vj-86c7-h7q3)) - Fix a path traversal vulnerability in the offline-copy feature that could lead to the **disclosure of local file contents** ([CVE-2026-107398](https://gith…

Full release notes →