makeplane — Vulnerabilities & Security Advisories 14

Makeplane provides collaborative software development tools, primarily serving DevOps teams for project management and code collaboration. Historically, the platform has been vulnerable to multiple remote code execution (RCE) flaws, cross-site scripting (XSS) attacks, and privilege escalation issues, accounting for most of its 14 recorded CVEs. Security researchers have identified consistent patterns in input validation failures and insufficient access controls across different versions. While no major public security incidents have been widely documented, the accumulation of CVEs suggests ongoing challenges in secure coding practices, particularly in handling user-supplied data and maintaining proper privilege boundaries between different user roles.