Download Latest Version v2.0.0-rc.4 source code.tar.gz (3.8 MB)
Email in envelope

Get an email when there's a new version of Planka

Home / v1.26.3
Name Modified Size InfoDownloads / Week
Parent folder
planka-prebuild.zip 2025-09-04 6.7 MB
0
README.md 2025-09-04 758 Bytes
0
v1.26.3 source code.tar.gz 2025-09-04 4.2 MB
0
v1.26.3 source code.zip 2025-09-04 4.6 MB
0
Totals: 4 Items   15.6 MB 0

Security Release

  • Fixed a vulnerability where maliciously renamed file attachments could execute JavaScript in the gallery UI.
  • The issue originated from an upstream library react-photoswipe-gallery, but PLANKA has patched it locally to prevent the use of dangerous innerHTML when setting gallery captions.
  • Users should update to PLANKA >= 1.26.3 or >= 2.0.0-rc.4 to be protected.
  • More details and credits: Security Advisory
  • Reported by @AmjadAlii via responsible disclosure.

What's Changed

  • fix: Patch react-photoswipe-gallery to prevent XSS in captions

Full Changelog: https://github.com/plankanban/planka/compare/v1.26.2...v1.26.3

Source: README.md, updated 2025-09-04