https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:42:00 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-382891 EUVD-2026-382891 https://cve.radiocsirt.org/vuln/euvd-2026-382891 https://cve.radiocsirt.org/vuln/fkie_cve-2026-104979 <p>Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes description_html through Issue.objects.create(...) without calling validate_html_content from nh3. Any authenticated user, including a new user with no workspace memberships, can plant arbitrary HTML in a project that has a published DeployBoard with intake enabled. When a project member or viewer of a closed intake item clicks the planted link, the TipTap \tjavascript: parser bypass and the target=&#34;_self&#34; click handler execute JavaScript in the viewer&#39;s session and exfiltrate a long-lived API token. This issue is fixed in 1.4.0.</p> <p>Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes description_html through Issue.objects.create(...) without calling validate_html_content from nh3. Any authenticated user, including a new user with no workspace memberships, can plant arbitrary HTML in a project that has a published DeployBoard with intake enabled. When a project member or viewer of a closed intake item clicks the planted link, the TipTap \tjavascript: parser bypass and the target=&#34;_self&#34; click handler execute JavaScript in the viewer&#39;s session and exfiltrate a long-lived API token. This issue is fixed in 1.4.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-104979