Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-10850
5.4
MEDIUMCVSS v3
Severity scale
010
Description
Plane CE 1.3.1 allows a low-privileged project member to submit arbitrary HTML/JS in the description_html field when creating an intake work item through the API v1 intake endpoint.
makeplane/plane
GitHub🔥🔥🔥 Open-source Jira, Linear, Monday, and ClickUp alternative. Plane is a modern project management platform to manage tasks, sprints, docs, and triage.
GitHub🔥🔥🔥 Open-source Jira, Linear, Monday, and ClickUp alternative. Plane is a modern project management platform to manage tasks, sprints, docs, and triage.= 1.3.1NVD