CVE-2026-104976 - Plane: SSRF in Gitea OAuth
CVE ID :CVE-2026-104976 Published : Oct. 5, 2026, 6:17 p.m. | 1 hour, 10 minutes ago Description :Plane is an open-source project management tool. Prior to 1.4.0, Plane validates GITEA_HOST only for its URL scheme and does not reject hosts that resolve to private or internal IP addresses. The...