CVE-2026-105636 - Plane: SSRF via HTTP redirect in webhook delivery (allow_redirects not set)
CVE ID :CVE-2026-105636 Published : Oct. 5, 2026, 6:02 p.m. | 1 hour, 25 minutes ago Description :Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/webhook_task.py calls requests.post() without allow_redirects=False and does...