Mmastodon TechnologyCybersecurity first seen 19 h ago, last 19 h ago, peak #5

High-severity SSRF vulnerability disclosed in Plane project management tool

Original: 🚨 EUVD-2026-92535 📊 Score: 7.7/10 (CVSS v3.1) 📦 Product: plane 🏢 Vendor: makeplane 📅 Updated: 2026-10-05 📝 Plane is an o

A new vulnerability, EUVD-2026-92535, has been catalogued in Plane, the open-source project management tool from Makeplane, with a CVSS v3.1 score of 7.7 out of 10. The flaw involves an SSRF in work-item link unfurling; earlier fixes for related issues CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw shipped in v1.2.2 were incomplete before version 1.4.0.

Why now: Security teams are being alerted to a newly updated high-severity advisory affecting an open-source tool they may self-host.

PlaneMakeplaneEUVD-2026-92535CVE-2026-27706

Open on mastodon →

Evidence

• 🚨 EUVD-2026-92535 📊 Score: 7.7/10 (CVSS v3.1) 📦 Product: plane 🏢 Vendor: makeplane 📅 Updated: 2026-10-05 📝 Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link unfurling shipped in v1.2.2,… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1143665