P

Plane Security Vulnerabilities (CVE)

Explore vulnerabilities and security advisories affecting Plane products.

1 known CVE vulnerabilities tracked

Critical
0
High
0
Medium
1
Low
0
None
0

Vulnerabilities By Year

1
2026

Products Affected

Plane 1

All Plane CVEs

Recent Highest Score Oldest
CVE-2026-40102
6.5 medium

Plane is an open-source project management tool. In versions 1.3.0 and below, SavedAnalyticEndpoint passes the user-controlled segment query parameter directly to a Django F() expression without validation (unlike the regular AnalyticsEndpoint, which checks against an allowlist), causing ORM Field R

Plane May 20, 2026