Useplunk

Plunk

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2026-42192

  • EPSS 0.18%
  • Veröffentlicht 08.05.2026 21:13:25
  • Zuletzt bearbeitet 12.05.2026 16:45:18

Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, a stored cross-site scripting (XSS) vulnerability exists in the campaign management feature, where the email body content created by authenticated project members...

9.1

CVE-2026-42193

  • EPSS 0.13%
  • Veröffentlicht 08.05.2026 21:12:26
  • Zuletzt bearbeitet 12.05.2026 16:45:18

Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, the /webhooks/sns endpoint accepts Amazon SNS notification payloads from unauthenticated requests without verifying the SNS signature, certificate, or topic ARN, ...

4.3

CVE-2026-34975

  • EPSS 0.19%
  • Veröffentlicht 06.04.2026 16:10:05
  • Zuletzt bearbeitet 22.04.2026 19:58:53

Plunk is an open-source email platform built on top of AWS SES. Prior to 0.8.0, a CRLF header injection vulnerability was discovered in SESService.ts, where user-supplied values for from.name, subject, custom header keys/values, and attachment filena...

8.6

CVE-2026-32096

  • EPSS 0.27%
  • Veröffentlicht 11.03.2026 19:53:39
  • Zuletzt bearbeitet 16.03.2026 17:00:18

Plunk is an open-source email platform built on top of AWS SES. Prior to 0.7.0, a Server-Side Request Forgery (SSRF) vulnerability existed in the SNS webhook handler. An unauthenticated attacker could send a crafted request that caused the server to ...

5.4

CVE-2026-32095

  • EPSS 0.14%
  • Veröffentlicht 11.03.2026 19:52:15
  • Zuletzt bearbeitet 16.03.2026 17:10:07

Plunk is an open-source email platform built on top of AWS SES. Prior to 0.7.1, Plunk's image upload endpoint accepted SVG files, which browsers treat as active documents capable of executing embedded JavaScript, creating a stored XSS vulnerability. ...