https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:20:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-382899 EUVD-2026-382899 https://cve.radiocsirt.org/vuln/euvd-2026-382899 https://cve.radiocsirt.org/vuln/fkie_cve-2026-105628 <p>Plane is an open-source project management tool. Prior to 1.4.0, Plane&#39;s OAuth avatar synchronization flow fetches avatar_url from provider user data through a server-side HTTP request without internal IP validation and follows redirects by default. An attacker can provide an avatar URL that redirects to an internal-only resource, such as a metadata endpoint, and Plane uploads the fetched response as a user avatar file. The object is then exposed through /api/assets/v2/static/{asset_id}/, allowing exfiltration of internally fetched content. This issue is fixed in 1.4.0.</p> <p>Plane is an open-source project management tool. Prior to 1.4.0, Plane&#39;s OAuth avatar synchronization flow fetches avatar_url from provider user data through a server-side HTTP request without internal IP validation and follows redirects by default. An attacker can provide an avatar URL that redirects to an internal-only resource, such as a metadata endpoint, and Plane uploads the fetched response as a user avatar file. The object is then exposed through /api/assets/v2/static/{asset_id}/, allowing exfiltration of internally fetched content. This issue is fixed in 1.4.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-105628