Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:18:11 +0000 CVE-2026-104892 — Plane: Plaintext logging of API token https://vulnerability.circl.lu/vuln/cve-2026-104892 <p><strong>Affected:</strong> makeplane plane</p> <p>Plane is an open-source project management tool. Prior to 1.4.0, aPITokenLogMiddleware logs API keys in plaintext. This allows someone with low privileges to steal user API keys and further escalate their privileges. This issue is fixed in 1.4.0.</p> <p><strong>Affected:</strong> makeplane plane</p> <p>Plane is an open-source project management tool. Prior to 1.4.0, aPITokenLogMiddleware logs API keys in plaintext. This allows someone with low privileges to steal user API keys and further escalate their privileges. This issue is fixed in 1.4.0.</p> https://vulnerability.circl.lu/vuln/cve-2026-104892