Manish Gupta ad73ca300c [WEB-7730] fix(security): scope cascade deletes to workspace in BulkDeleteIssuesEndpoint (#9270) ...

* fix(security): scope cascade deletes to workspace in BulkDeleteIssuesEndpoint

CycleIssue and ModuleIssue cascade deletes used raw issue_ids from the
request instead of the already workspace+project scoped issues queryset,
allowing cross-workspace deletion of related records.

Fixes GHSA-6cw7-h92q-p9hg and GHSA-2rr4-rp7r-32p4.
GHSA-7q7r-mrr4-2wwx (sub-issue parent reassign) covered in WEB-7727.

Co-authored-by: Plane AI <noreply@plane.so>

* chore: remove advisory ID reference from code comment

---------

Co-authored-by: Plane AI <noreply@plane.so>
Co-authored-by: sriramveeraghanta <veeraghanta.sriram@gmail.com>

2026-06-20 16:41:21 +05:30

..

bin

[WEB-5592] chore: add static files update settings for static files support (#8251)

2025-12-09 21:05:26 +05:30

plane

[WEB-7730] fix(security): scope cascade deletes to workspace in BulkDeleteIssuesEndpoint (#9270)

2026-06-20 16:41:21 +05:30

requirements

chore(deps): bump cryptography (#9243)

2026-06-16 17:14:42 +05:30

templates

fix: update Twitter icon and links to X (#8785) (#8790)

2026-04-07 15:34:54 +05:30

tests

fix: Add docker pytest runner and fix bugs the suite surfaced (#9138)

2026-05-26 01:21:37 +05:30

.coveragerc

…

.env.example

- Add SIGNED_URL_EXPIRATION environment variable (#8136)

2025-12-03 10:52:19 +05:30

.prettierignore

fix: eslint (#8185)

2025-12-05 16:03:51 +05:30

Dockerfile.api

…

Dockerfile.dev

…

manage.py

chore: add copyright (#8584)

2026-01-27 13:54:22 +05:30

package.json

chore: bump up the package version

2026-04-20 17:20:12 +05:30

pyproject.toml

[WEB-5044] fix: ruff lint and format errors (#7868)

2025-09-29 19:15:32 +05:30

pytest.ini

…

requirements.txt

…

run_tests.py

chore: add copyright (#8584)

2026-01-27 13:54:22 +05:30

run_tests.sh

…