-
Notifications
You must be signed in to change notification settings - Fork 4.8k
Pull requests: makeplane/plane
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
[WEB-8019] fix(security): scope CycleIssue reassignment lookup to workspace/project
#9349
opened Jul 3, 2026 by
mguptahub
Collaborator
Loading…
[WEB-8017] fix(security): sanitize order_by on external REST API list endpoints
#9348
opened Jul 3, 2026 by
mguptahub
Collaborator
Loading…
[WEB-8012] fix: prevent ORM group_by/sub_group_by injection in issue endpoints
#9347
opened Jul 3, 2026 by
mguptahub
Collaborator
Loading…
6 tasks done
feat(devops): add out-of-the-box prometheus metrics and grafana observability stack
#9344
opened Jul 2, 2026 by
vishva-ux
Loading…
1 task done
fix: quick links widget overlap with plane ai promo on mobile
#9339
opened Jul 1, 2026 by
Ayusman-Singhal
Loading…
1 task done
[WEB-7946] fix: add rate limiting to email/password sign-in and sign-up endpoints
#9335
opened Jun 30, 2026 by
mguptahub
Collaborator
Loading…
4 tasks
[WEB-7895] fix: scope UserProjectInvitationsViewset to workspace-validated project IDs (GHSA-45hc-q4mw-jhxm)
#9333
opened Jun 29, 2026 by
mguptahub
Collaborator
Loading…
5 tasks
fix(ui): ignore Enter during IME composition in select dropdowns
#9331
opened Jun 28, 2026 by
greymoth-jp
Loading…
1 task done
fix(spreadsheet): apply active sort order to sub-task rows
#9326
opened Jun 26, 2026 by
codewithsupra
Loading…
chore: upgrade Django 4.2 → 5.2
#9325
opened Jun 26, 2026 by
sriramveeraghanta
Member
Loading…
2 of 6 tasks
fix(api): filter "Updated At" by updated_at column, not created_at
#9323
opened Jun 26, 2026 by
sanjibani
Loading…
fix(i18n): correct Korean burndown typo 버다운 → 번다운
#9317
opened Jun 25, 2026 by
mahip-kakan
Loading…
2 of 3 tasks
[WEB-7888] fix(security): normalize href before protocol check in CustomLinkExtension (GHSA-v2vv-7wq3-8w2j)
#9313
opened Jun 25, 2026 by
mguptahub
Collaborator
Loading…
5 tasks
[WEB-7887] fix(security): prevent stored XSS via SVG attachment served inline (GHSA-ch8j-vr4r-qf6h)
#9312
opened Jun 25, 2026 by
mguptahub
Collaborator
Loading…
5 tasks
[WEB-7877] fix(security): enforce token + auth validation on project invite accept/reject
#9308
opened Jun 24, 2026 by
mguptahub
Collaborator
Loading…
6 tasks
🐛 Bug: Issues created or updated via REST API send no notifications or emails
#9307
opened Jun 24, 2026 by
wildsurfer
Loading…
1 of 6 tasks
[GIT-243]fix: InstanceConfiguration not created for some keys
ready to merge
#9303
opened Jun 24, 2026 by
sangeethailango
Member
Loading…
feat(i18n): add Persian (Farsi) localization with RTL support
#9299
opened Jun 23, 2026 by
danialshirali16
Loading…
1 of 6 tasks
[GIT-227] fix: handle missing comment reaction in activity task #9175
#9298
opened Jun 23, 2026 by
CharitSinghChauhan
Loading…
fix: resolve cover_image relative URL validation error for self-hoste…
#9294
opened Jun 22, 2026 by
karthiksuki
Contributor
Loading…
5 tasks
fix(i18n): correct French translations - completed_on, stickies, backlog, and other untranslated strings
#9293
opened Jun 22, 2026 by
Lib-LOCALE
Loading…
2 of 5 tasks
[WEB-7778] fix(security): reject unverified OAuth provider emails to prevent ATO (Cluster E)
#9289
opened Jun 22, 2026 by
mguptahub
Collaborator
Loading…
9 tasks
[GIT-260] fix(user): Profile cover image uses stale image after update
#9285
opened Jun 22, 2026 by
codingwolf-at
Loading…
1 task done
Previous Next
ProTip!
Updated in the last three days: updated:>2026-06-30.