Mmastodon TechnologyCybersecurity first seen 13 h ago, last 13 h ago, peak #3

High-severity vulnerability disclosed in Plane project management tool

Original: 🚨 EUVD-2026-92533 📊 Score: 8.7/10 (CVSS v3.1) 📦 Product: plane 🏢 Vendor: makeplane 📅 Updated: 2026-10-05 📝 Plane is an o

A high-severity vulnerability, EUVD-2026-92533, has been disclosed in Plane, the open-source project management tool from vendor Makeplane. The flaw carries a CVSS v3.1 score of 8.7 out of 10 and affects versions prior to 1.4.0. Plane only validates the GITEA_HOST setting's URL scheme and does not reject hosts resolving to private networks, potentially exposing users to server-side request forgery. Users are advised to update to version 1.4.0.

Why now: Security researchers and users are flagging a newly published high-severity advisory affecting a widely used open-source tool.

PlaneMakeplaneEUVD-2026-92533

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 13 h ago to 13 h ago.

Evidence

• 🚨 EUVD-2026-92533 📊 Score: 8.7/10 (CVSS v3.1) 📦 Product: plane 🏢 Vendor: makeplane 📅 Updated: 2026-10-05 📝 Plane is an open-source project management tool. Prior to 1.4.0, Plane validates GITEA_HOST only for its URL scheme and does not reject hosts that resolve to private or… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1143663