CVE record · 1 source
CVE-2026-105638
CVSS 9.1Plane is an open-source project management tool.
- Product
- Redis / Valkey, Python / PyPI packages
- CVSS
- 9.1
- EPSS
- 0.004 (p32)
- Exposure class
- Database, Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Plane is an open-source project management tool.
Plane is an open-source project management tool. Prior to 1.4.0, Plane's magic-code email login uses a six-digit numeric OTP with approximately 20 bits of entropy. The verifier has no per-code failed-attempt counter, and an…