CVE-2026-104968 - Plane: Cross-workspace member enumeration via /api/workspaces/{slug}/entity-search/
CVE ID :CVE-2026-104968 Published : Oct. 5, 2026, 5:17 p.m. | 2 hours, 11 minutes ago Description :Plane is an open-source project management tool. Prior to 1.4.0, GET /api/workspaces/{slug}/entity-search/?query_type=user_mention returns workspace-member display names, UUIDs, and avatar URLs...