Vulnerabilities

TI-2026-27197 CVE-2026-34975

Plunk has a CRLF Email Header Injection in raw MIME message construction allows…

LOW 36

Plunk is an open-source email platform built on top of AWS SES.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00201 Published 2026-04-06 Fixed in 0.8.0 CWE-93

TI-2026-24634 CVE-2026-32096

MEDIUM 46

Plunk is an open-source email platform built on top of AWS SES.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00314 Published 2026-03-11 Fixed in 0.7.0 CWE-918

TI-2026-24633 CVE-2026-32095

LOW 24

Plunk is an open-source email platform built on top of AWS SES.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00162 Published 2026-03-11 Fixed in 0.7.1 CWE-79