GHSA-CMCR-Q4JF-P6Q9

creationtimestamp| type| source ---|---|--- 2026-04-07 21:22:30+00:00| published-proof-of-concept| Telegram/PsCoAl2rNCHfpa-IE94yjZNK4tjM6zifbqO0UkQOdEj8yI...

CVE-2026-39347

creationtimestamp| type| source ---|---|--- 2026-04-07 21:12:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwoy7caxq2g...

CVE-2026-39354

creationtimestamp| type| source ---|---|--- 2026-04-07 21:02:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwogcbwh522...

CVE-2026-39888

creationtimestamp| type| source ---|---|--- 2026-04-07 20:48:08+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-qf73-2hrx-xprp 2026-04-07 20:48:08+00:00| published-proof-of-concept|...

CVE-2026-39374

Plane is an an open-source project management tool. Prior to 1.3.0, the IssueBulkUpdateDateEndpoint allows a project member ADMIN or MEMBER to modify the startdate and targetdate of ANY issue across the entire Plane instance, regardless of workspace or project membership. The endpoint fetches...

CVE-2026-33273

creationtimestamp| type| source ---|---|--- 2026-04-07 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN33581068/ 2026-04-08 07:34:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mixrqpas4u2z 2026-04-13 07:29:38+00:00| seen|...

CVE-2026-24913

creationtimestamp| type| source ---|---|--- 2026-04-07 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN33581068/ 2026-04-08 06:19:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mixnln6bez2h 2026-04-08 07:15:31+00:00| seen|...

CVE-2026-39374 Plane IDOR: Cross-Project Issue Date Modification via Bulk Update Endpoint

Plane is an an open-source project management tool. Prior to 1.3.0, the IssueBulkUpdateDateEndpoint allows a project member ADMIN or MEMBER to modify the startdate and targetdate of ANY issue across the entire Plane instance, regardless of workspace or project membership. The endpoint fetches...

CVE-2026-39374

Plane is an an open-source project management tool. Prior to 1.3.0, the IssueBulkUpdateDateEndpoint allows a project member ADMIN or MEMBER to modify the startdate and targetdate of ANY issue across the entire Plane instance, regardless of workspace or project membership. The endpoint fetches...

CVE-2026-39374 Plane IDOR: Cross-Project Issue Date Modification via Bulk Update Endpoint

Plane is an an open-source project management tool. Prior to 1.3.0, the IssueBulkUpdateDateEndpoint allows a project member ADMIN or MEMBER to modify the startdate and targetdate of ANY issue across the entire Plane instance, regardless of workspace or project membership. The endpoint fetches...

CVE-2026-39374

The CVE describes an IDOR-style flaw in Plane (open‑source project management tool) prior to version 1.3.0. The IssueBulkUpdateDateEndpoint lets a project member with ADMIN/MEMBER privileges modify start_date and target_date of ANY issue across the entire instance by fetching issues by ID without...

GHSA-HC6G-H48V-WQVQ

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:33+00:00| seen| Telegram/MwNatB1kDaoxbSrZihFWwC12FE1HreAtxbr2hmQcZTjcFY...

GHSA-XQ86-JH52-728G

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:33+00:00| seen| Telegram/MwNatB1kDaoxbSrZihFWwC12FE1HreAtxbr2hmQcZTjcFY...

CVE-2026-39325

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:24+00:00| seen| Telegram/d9ntGhgAXUNib3HVhoGCh5gTeuhEkXLp8JxGb0TRA4y7Jks 2026-04-11 06:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mj76bmfjjn2r...

CVE-2026-39327

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:24+00:00| seen| Telegram/d9ntGhgAXUNib3HVhoGCh5gTeuhEkXLp8JxGb0TRA4y7Jks 2026-04-08 09:07:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mixwxybqkw2s 2026-04-11 01:07:08+00:00| seen|...

GHSA-R6CR-MVR9-F6WX

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:02+00:00| published-proof-of-concept| Telegram/b7kqkVlyupyGML8IRNuJF5vW46V1gBKnrWAnE54KrYglqM...

CVE-2026-4631

creationtimestamp| type| source ---|---|--- 2026-04-07 19:34:21+00:00| seen| Telegram/OYPeMWdUc2Y5vftMssiNoDYA806NyVd6-qxnWxvkgzfQI 2026-04-07 19:34:38+00:00| seen| Telegram/H9-wLQyAW-fjKUXTN1LxHiROu7RUaGwpmVWmVHEm8VlmA 2026-04-10 15:35:02+00:00| seen|...

GHSA-8HWW-W7CC-77RJ

creationtimestamp| type| source ---|---|--- 2026-04-07 19:34:12+00:00| seen| Telegram/RceOsMbVCcV6wQMI9eJfY-7gRIWU138I3ZVebAFZlOd7ZE...

CVE-2026-35611

creationtimestamp| type| source ---|---|--- 2026-04-07 19:34:12+00:00| seen| Telegram/RceOsMbVCcV6wQMI9eJfY-7gRIWU138I3ZVebAFZlOd7ZE 2026-06-11 01:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnxzxd67lq2a...

CVE-2026-35581

creationtimestamp| type| source ---|---|--- 2026-04-07 19:33:54+00:00| seen| Telegram/2sVgvXJxKnqdd0t3ix7z2PFFoP4qMIqNMJ7HHwXtd94aJL4 2026-04-17 14:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjp3vgyzwy2v...