Known Vulnerabilities for Plane by Makeplane
Listed below are 10 of the newest known vulnerabilities associated with "Plane" by "Makeplane".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-105641 json | Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deployments/cli/community... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105640 json | Plane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses returned by Gitea OAuth and by ... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105639 json | Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any sub... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105638 json | Plane is an open-source project management tool. Prior to 1.4.0, Plane's magic-code email login uses a six-digit numeric OTP ... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105637 json | Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/views/as... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105636 json | Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/webhook_... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105635 json | Plane is an open-source project management tool. Prior to 1.4.0, ProjectJoinEndpoint at GET /api/workspaces/{slug}/projects/{... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105634 json | Plane is an open-source project management tool. Prior to 1.3.0, the ProjectMemberViewSet.partial_update method allows any pr... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105633 json | Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issue_id in t... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105632 json | Plane is an open-source project management tool. Prior to 1.4.0, the GraphQL joinProject mutation lets any workspace member a... | Not Provided | 2026-10-05 | 2026-10-05 |