CVE-2026-85290 InvoicePlane: Log Injection via Unsanitized User Input in Cron Key Error Logging

In versions prior to 1.7.2 , the InvoicePlane application is vulnerable to Log Injection due to unsanitized user input in the Cron::recur() method. The application fails to neutralize CRLF characters when writing an invalid cron_key from the URL path into the application log. An unauthenticated r...