{"uuid": "b0430a92-593c-4aee-ac44-4030c7fa8b5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105640", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcfo3d4pb2x", "content": "CVE-2026-105640 - plane\nThe Plane project\u2011management app (versions before 1.4.0) accepts email addresses from Gitea or self\u2011hosted GitLab OAuth logins without checking if the provider has verified them. An\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#plane #makeplane #CVE #infosec", "creation_timestamp": "2026-10-07T16:50:04.384588Z"}