Useplunk

5 CVEs across 1 Useplunk products. Browse Useplunk vulnerabilities, severities, and proof-of-concept exploits.

Useplunk products with known CVEs

ProductCVEs
Plunk5
Useplunk CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-42193Critical9.12026-05-08Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, the /webhooks/sns endpoint accepts Amazon SNS notification payloads fro…
CVE-2026-42192Medium5.42026-05-08Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, a stored cross-site scripting (XSS) vulnerability exists in the campaig…
CVE-2026-34975High8.52026-04-06Plunk is an open-source email platform built on top of AWS SES. Prior to 0.8.0, a CRLF header injection vulnerability was discovered in SESService.ts, where us…
CVE-2026-32096Critical9.32026-03-11Plunk is an open-source email platform built on top of AWS SES. Prior to 0.7.0, a Server-Side Request Forgery (SSRF) vulnerability existed in the SNS webhook h…
CVE-2026-32095Medium5.42026-03-11Plunk is an open-source email platform built on top of AWS SES. Prior to 0.7.1, Plunk's image upload endpoint accepted SVG files, which browsers treat as activ…