Makeplane

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 60
    Known Exploited: 0
    8
    Critical Level Threats
    22
    High Level Threats
    22
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-111869

    makeplane API Endpoint reliance on untrusted inputs in a security decision

    Last Modified: Oct 20, 2026
    Published: Oct 18, 2026

    CVE-2026-102980

    Plane: Cross-Project Page Content Disclosure via PageVersionEndpoint Missing Project Scope

    Last Modified: Oct 22, 2026
    Published: Oct 14, 2026

    CVE-2026-102985

    Plane: Any project member can modify (deactivate) other members' records

    Last Modified: Oct 22, 2026
    Published: Oct 14, 2026

    CVE-2026-102986

    Plane: Any Authenticated User Can Upload and Delete Assets in Any Published Project via /api/public/assets/v2/anchor/{anchor}/

    Last Modified: Oct 17, 2026
    Published: Oct 14, 2026

    CVE-2026-102981

    Plane: Unauthenticated Workspace Invitation Token Leakage

    Last Modified: Oct 13, 2026
    Published: Oct 13, 2026
    Items Per Page
    Makeplane Vulnerabilities & Security CVEs | CVE-DB