Skip to content
OpenAdvisories

Package · PyPI

plane

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.5
    CVE-2026-30242

    Plane: SSRF via Incomplete IP Validation in Webhook URL Serializer

    Plane is an an open-source project management tool. Prior to version 1.2.3, the webhook URL validation in plane/app/serializers/webhook.py only checks ip.is_loopback, allowing attackers with workspace ADMIN role to create webhooks pointing to private/internal…

    makeplane plane plane PyPI
  • High 7.5
    CVE-2026-30244

    Plane: Unauthenticated Workspace Member Information Disclosure

    Plane is an an open-source project management tool. Prior to version 1.2.2, unauthenticated attackers can enumerate workspace members and extract sensitive information including email addresses, user roles, and internal identifiers. The vulnerability stems fr…

    makeplane plane plane PyPI