CVE-2026-39374

Plane is an an open-source project management tool. Prior to 1.3.0, the IssueBulkUpdateDateEndpoint allows a project member ADMIN or MEMBER to modify the startdate and targetdate of ANY issue across the entire Plane instance, regardless of workspace or project membership. The endpoint fetches...

CVE-2026-39374

Plane is an an open-source project management tool. Prior to 1.3.0, the IssueBulkUpdateDateEndpoint allows a project member ADMIN or MEMBER to modify the startdate and targetdate of ANY issue across the entire Plane instance, regardless of workspace or project membership. The endpoint fetches...

CVE-2026-39374

The CVE describes an IDOR-style flaw in Plane (open‑source project management tool) prior to version 1.3.0. The IssueBulkUpdateDateEndpoint lets a project member with ADMIN/MEMBER privileges modify start_date and target_date of ANY issue across the entire instance by fetching issues by ID without...

CVE-2025-6232

creationtimestamp| type| source ---|---|--- 2025-07-17 16:20:53+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3lu6dm7d6js22...

CVE-2025-53677

creationtimestamp| type| source ---|---|--- 2025-07-09 18:17:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltkgf5wxrj2o 2025-09-09 20:51:41+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...

CVE-2025-5291

creationtimestamp| type| source ---|---|--- 2025-06-17 11:38:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18577 2025-06-17 16:01:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrsujxd36h2a...

CVE-2025-5853

creationtimestamp| type| source ---|---|--- 2025-06-09 02:00:40+00:00| published-proof-of-concept| Telegram/AJN0S8YZYdVmzbOgnKAjxxpHw3CsdDBYQVeb8zgl5Lh2q4 2025-06-09 03:13:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr5fvtzpp223...

CVE-2025-5600

creationtimestamp| type| source ---|---|--- 2025-06-04 18:26:50+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqsggjf7rnz2...

GHSA-7VCF-F5V9-3WR6

creationtimestamp| type| source ---|---|--- 2025-05-27 16:52:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17664 2025-05-27 17:37:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114581010099043902...

CVE-2024-53208

creationtimestamp| type| source ---|---|--- 2024-12-27 14:17:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lec6jqqqol25 2024-12-27 16:37:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113725762975054135 2025-06-26 19:08:13+00:00| seen|...