https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T15:18:31.635334+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-104892 CVE-2026-104892 — Plane: Plaintext logging of API token 2026-10-06T15:18:32.472288+00:00

Affected: makeplane plane

Plane is an open-source project management tool. Prior to 1.4.0, aPITokenLogMiddleware logs API keys in plaintext. This allows someone with low privileges to steal user API keys and further escalate their privileges. This issue is fixed in 1.4.0.