mirror of
https://github.com/plankanban/planka.git
synced 2026-07-15 21:48:11 +03:00
-
released this
2026-03-01 18:53:11 +03:00 | 66 commits to master since this release📅 Originally published on GitHub: Sun, 01 Mar 2026 16:03:23 GMT
🏷️ Git tag created: Sun, 01 Mar 2026 15:53:11 GMTSecurity Release
- Fixed an issue where the outgoing proxy could be accessed from outside the server in host-network Docker deployments (
network_mode: host), potentially allowing external parties to relay requests. - The proxy now only accepts connections from the local server, preventing accidental exposure while keeping internal functionality intact.
- Users should update to PLANKA
>= 2.0.3to be protected. - More details and credits: Security Advisory
- Reported by Luke via responsible disclosure.
What's Changed
- fix(proxy): Prevent external access to outgoing proxy in host-network mode
Full Changelog: https://github.com/plankanban/planka/compare/v2.0.2...v2.0.3
Downloads
- Fixed an issue where the outgoing proxy could be accessed from outside the server in host-network Docker deployments (