Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
InvoicePlane
/
InvoicePlane
Public
Notifications
You must be signed in to change notification settings
Fork
867
Star
3.1k
Code
Issues
54
Pull requests
16
Discussions
Actions
Projects
Security and quality
12
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
InvoicePlane
.github
on
develop
User selector
All users
All time
Commit history
Commits on Aug 11, 2026
Improve CHANGELOG.md
nielsdrost7
authored
1feae7d
View commit details
Copy full SHA for 1feae7d
View code at this point
Browse repository at this point
Link Stripe currency issue in changelog
nielsdrost7
committed
97caf3d
View commit details
Copy full SHA for 97caf3d
View code at this point
Browse repository at this point
Document Stripe zero-decimal currency fix
nielsdrost7
committed
70ef6f5
View commit details
Copy full SHA for 70ef6f5
View code at this point
Browse repository at this point
Clarify the generate_pdf CSRF release note
Show description for 6aded6d
claude
authored and
nielsdrost7
committed
6aded6d
View commit details
Copy full SHA for 6aded6d
View code at this point
Browse repository at this point
Apply the same generate_pdf CSRF gate to quotes
Show description for 21cb126
claude
authored and
nielsdrost7
committed
21cb126
View commit details
Copy full SHA for 21cb126
View code at this point
Browse repository at this point
Document the generate_pdf GET-CSRF fix and credit @ashrexon
Show description for fbf8979
claude
authored and
nielsdrost7
committed
fbf8979
View commit details
Copy full SHA for fbf8979
View code at this point
Browse repository at this point
Commits on Aug 10, 2026
Document password-reset expiry-bypass advisory and credit @baozongwi
Show description for 433f0bf
claude
authored and
nielsdrost7
committed
433f0bf
View commit details
Copy full SHA for 433f0bf
View code at this point
Browse repository at this point
Enforce password-reset token expiry on POST and ship the expiry column migration
Show description for 4992050
claude
authored and
nielsdrost7
committed
4992050
View commit details
Copy full SHA for 4992050
View code at this point
Browse repository at this point
Commits on Aug 7, 2026
Document PR #1665 in CHANGELOG.md
Show description for f68e2f5
nielsdrost7
committed
f68e2f5
View commit details
Copy full SHA for f68e2f5
View code at this point
Browse repository at this point
Consolidate duplicate security-advisory links in CHANGELOG.md
Show description for 1ca63ef
nielsdrost7
committed
1ca63ef
View commit details
Copy full SHA for 1ca63ef
View code at this point
Browse repository at this point
Credit GHSA-cjwm-qx8w-hrq2 / @polybjorn for the lockout report
Show description for 0c6a69e
nielsdrost7
committed
0c6a69e
View commit details
Copy full SHA for 0c6a69e
View code at this point
Browse repository at this point
Fix permanent account lockout: unreachable unlock check + wrong hour field
Show description for 61cf5a7
nielsdrost7
committed
61cf5a7
View commit details
Copy full SHA for 61cf5a7
View code at this point
Browse repository at this point
Commits on Aug 6, 2026
Reference PR #1664 in changelog
nielsdrost7
committed
bad479a
View commit details
Copy full SHA for bad479a
View code at this point
Browse repository at this point
Fix CSRF, XSS, and log-injection gaps found in security re-audit
Show description for d2867f0
nielsdrost7
committed
d2867f0
View commit details
Copy full SHA for d2867f0
View code at this point
Browse repository at this point
Reference Sumex SSRF/XML-injection PR in changelog
Show description for 74ef45f
nielsdrost7
committed
74ef45f
View commit details
Copy full SHA for 74ef45f
View code at this point
Browse repository at this point
Commits on Aug 4, 2026
Reference report PDF SSRF PR in changelog
nielsdrost7
committed
a5ed9d8
View commit details
Copy full SHA for a5ed9d8
View code at this point
Browse repository at this point
Fix report PDF date SSRF
nielsdrost7
committed
17c37c4
View commit details
Copy full SHA for 17c37c4
View code at this point
Browse repository at this point
Harden email template placeholders
nielsdrost7
committed
29c2868
View commit details
Copy full SHA for 29c2868
View code at this point
Browse repository at this point
Lock setup after installation
nielsdrost7
committed
10c4b23
View commit details
Copy full SHA for 10c4b23
View code at this point
Browse repository at this point
Link advisories for Char0n1507 reports
nielsdrost7
committed
c57e733
View commit details
Copy full SHA for c57e733
View code at this point
Browse repository at this point
Document password reset and password change hardening
nielsdrost7
committed
93a6657
View commit details
Copy full SHA for 93a6657
View code at this point
Browse repository at this point
Warn about custom template allowlists
nielsdrost7
committed
40e45d8
View commit details
Copy full SHA for 40e45d8
View code at this point
Browse repository at this point
Commits on Aug 3, 2026
docs: correct custom-template selector requirement (folder alone lists nothing) (#1652)
Show description for c36b66c
4 people
authored
c36b66c
View commit details
Copy full SHA for c36b66c
View code at this point
Browse repository at this point
docs: clarify custom templates require both folder file and allowlist entry
Show description for 299e31a
claude
authored and
nielsdrost7
committed
299e31a
View commit details
Copy full SHA for 299e31a
View code at this point
Browse repository at this point
Commits on Aug 1, 2026
Update UPGRADE.md
nielsdrost7
authored
ddf02d5
View commit details
Copy full SHA for ddf02d5
View code at this point
Browse repository at this point
Update SECURITY_ADVISORY_RCE_FIX.md
nielsdrost7
authored
add3445
View commit details
Copy full SHA for add3445
View code at this point
Browse repository at this point
Update SECURITY_ADVISORY_RCE_FIX.md
nielsdrost7
authored
25866f8
View commit details
Copy full SHA for 25866f8
View code at this point
Browse repository at this point
Commits on Jul 30, 2026
docs: drop two unreproducible XSS advisories from the summary table
Show description for 893e824
nielsdrost7
committed
893e824
View commit details
Copy full SHA for 893e824
View code at this point
Browse repository at this point
docs: clean up advisory titles and credit 5 more Fixed-In PRs
Show description for 84b4b1d
nielsdrost7
committed
84b4b1d
View commit details
Copy full SHA for 84b4b1d
View code at this point
Browse repository at this point
Update CHANGELOG.md
nielsdrost7
committed
c9effa9
View commit details
Copy full SHA for c9effa9
View code at this point
Browse repository at this point
docs: drop CVSSv3 and CWE columns from the Security Vulnerability Summary table
Show description for 7f25f68
nielsdrost7
committed
7f25f68
View commit details
Copy full SHA for 7f25f68
View code at this point
Browse repository at this point
docs: credit PRs 1545/1556/1559/1561/1573/1622/1624/1632 after diffing the ambiguous rows
Show description for fbfdd46
nielsdrost7
committed
fbfdd46
View commit details
Copy full SHA for fbfdd46
View code at this point
Browse repository at this point
docs: credit PRs 1555/1557/1574/1583/1615/1616/1620/1621/1623/1626 in the security summary table
Show description for 56c948a
nielsdrost7
committed
56c948a
View commit details
Copy full SHA for 56c948a
View code at this point
Browse repository at this point
Commits on Jul 18, 2026
docs: align the 5 new hardening-fix severities to GitHub's CVSS-computed bucket
nielsdrost7
committed
94ff0a9
View commit details
Copy full SHA for 94ff0a9
View code at this point
Browse repository at this point
docs: credit Char0n1507 and fill GHSA/CVSS data for the 5 new hardening fixes
nielsdrost7
committed
3dfc620
View commit details
Copy full SHA for 3dfc620
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.