CVE-2026-104977 | makeplane Plane up to 1.3.x Work-Item Link Unfurling server-side request forgery

October 5, 2026 Yanac

A vulnerability, which was classified as problematic, was found in makeplane Plane up to 1.3.x. Affected by this vulnerability is an unknown functionality of the component Work-Item Link Unfurling. The manipulation results in server-side request forgery.

This vulnerability was named CVE-2026-104977. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More