CVE-2026-104977

Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link unfurling shipped in v1.2.2, remains incomplete in the v1.3.1 GA release. Any authenticated project member can make the server fetch attacker-selected...

CVE-2026-105636 Plane: SSRF via HTTP redirect in webhook delivery (allow_redirects not set)

Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/webhooktask.py calls requests.post without allowredirects=False and does not validate redirect targets. validateurl blocks private, loopback, link-local, and reserved addresses in...

CVE-2026-105636 Plane: SSRF via HTTP redirect in webhook delivery (allow_redirects not set)

Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/webhooktask.py calls requests.post without allowredirects=False and does not validate redirect targets. validateurl blocks private, loopback, link-local, and reserved addresses in...

CVE-2026-104977

The project management tool Plane contains a Server-Side Request Forgery (SSRF) vulnerability in its work-item link unfurling functionality. The issue persists in versions prior to 1.4.0 because the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw remained incomplete in the 1.3.1 GA release. Specif...

EUVD-2026-92535

Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link unfurling shipped in v1.2.2, remains incomplete in the v1.3.1 GA release. Any authenticated project member can make the server fetch attacker-selected...

CVE-2026-104977 Plane: Incomplete fix of CVE-2026-27706 — SSRF still reachable on: missing is_blocked_ip (CGNAT/multicast) + DNS-rebinding TOCTOU

Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link unfurling shipped in v1.2.2, remains incomplete in the v1.3.1 GA release. Any authenticated project member can make the server fetch attacker-selected...

CVE-2026-104977 Plane: Incomplete fix of CVE-2026-27706 — SSRF still reachable on: missing is_blocked_ip (CGNAT/multicast) + DNS-rebinding TOCTOU

Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link unfurling shipped in v1.2.2, remains incomplete in the v1.3.1 GA release. Any authenticated project member can make the server fetch attacker-selected...

CVE-2026-104977 Plane: Incomplete fix of CVE-2026-27706 — SSRF still reachable on: missing is_blocked_ip (CGNAT/multicast) + DNS-rebinding TOCTOU

Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link unfurling shipped in v1.2.2, remains incomplete in the v1.3.1 GA release. Any authenticated project member can make the server fetch attacker-selected...

WordPress Autoship Cloud for WooCommerce Subscription Products plugin <= 2.17.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Averon Averenkov in WordPress Plugin Autoship Cloud for WooCommerce Subscription Products versions = 2.17.1...

CVE-2026-86671

In Eclipse Che versions 7.29.0 and later, the GET /api/scm/resolve and POST /api/factory/resolver endpoints pass an attacker-controlled URL to URLFetcher.fetch, which calls new URLurl.openConnection with no scheme or host allow-list and returns the response body to the caller. Any authenticated C...

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in js-yaml

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in js-yaml. CVE-2026-84375 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-84375 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. From 3.0.0...

Security Bulletin: Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in multer

Summary Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in multer. CVE-2026-77037, CVE-2026-77063, CVE-2026-77078, CVE-2026-82333 The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-77037 DESCRIPTION: multer is a middleware for handling...

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in golang.org/x/crypto

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in golang.org/x/crypto. CVE-2026-56854 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-56854 DESCRIPTION: The source-address critical option in the...

heimdall-unauth-ssrf

Heimdall: Unauthenticated SSRF via testconfig Description...

Harvest Now, Decrypt Later: The Attack You Defend Against by Doing Nothing

Somewhere, an attacker is recording your encrypted traffic. Not breaking it. Recording it. The bet is patient and simple: store ciphertext today, wait for quantum computers to mature, decrypt at leisure. The industry calls it harvest now, decrypt later HNDL, and it is the rare security threat wit...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: x86/EFI: The deferral of freeing boot services memory The efifreebootservices function frees the memory occupied by EFIBOOTSERVICESCODE and EFIBOOTSERVICESDATA using memblockfreelate. There are two issues with this approach:...

Security Bulletin: Kernel privilege escalation and disclosure Vulnerabilities in Linux in IBM Cloud Pak System[CVE-2026-46300, CVE-2026-46333, CVE-2026-43284]

Summary Multiple vulnerabilities in the Linux kernel affect the underlying operating system used by Platform system Manager PSM and OS Image for Red Hat Enterprise Linux Systems shipped with Cloud Pak System, . These issues include a local privilege escalation flaw in the networking subsystem...

Security Bulletin: Due to AIX, IBM Cloud Pak System is affected by NULL pointer dereference vulnerability

Summary Due to AIX, IBM Cloud Pak System is affected by NULL pointer dereference vulnerability. Vulnerability was addressed in OS Image for AIX IBM Cloud Pak System version 2.3.5.1. Vulnerability Details CVEID:CVE-2025-49795 DESCRIPTION: A NULL pointer dereference vulnerability was found in libxm...

PT-2026-106274

Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remote files.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint...

PT-2026-106083

Name of the Vulnerable Software and Affected Versions Plane versions prior to 1.4.0 Description The webhook delivery task in apps/api/plane/bgtasks/webhook task.py uses the requests.post function without setting allow redirects=False and fails to validate redirect targets. While the validate url...