Planka

Kanban board to manage your projects and tasks

Alternative to: trello, asana, jira, kanban

About Versions (60)

v2.2.1

2026-08-10

This is an emergency release fixing a security vulnerability. We recommend updating as soon as possible.

Fixed a path traversal vulnerability (CWE-22) in the JWT-protected static file routes (/user-avatars, /background-images, /favicons). On instances using local file storage, an authenticated user could read arbitrary files readable by the PLANKA process. Fixed by enforcing that resolved paths stay within the uploads root. S3-backed storage was not affected.

Reported responsibly by Alpastx — thank you.

Details: [GHSA link]

Full Changelog: https://github.com/plankanban/planka/compare/v2.2.0…v2.2.1