Overview · useplunk/plunk · GitHub

Security

No security policy detected

This project has not set up a SECURITY.md file yet.

Report a vulnerability

Stored XSS in campaign view
GHSA-mjqc-qrv3-24hq published Apr 20, 2026 by driaug
Moderate
SNS webhook forgery
GHSA-9792-w86v-gx53 published Apr 20, 2026 by driaug
Critical
CRLF Email Header Injection in raw MIME message construction allows authenticated API user to inject arbitrary email headers
GHSA-2mvm-rg5v-7hfq published Mar 31, 2026 by driaug
High
Stored Cross-Site Scripting (XSS) via SVG File Upload
GHSA-69jg-7493-cx5x published Mar 10, 2026 by driaug
Moderate
SSRF via unvalidated AWS SNS SubscriptionConfirmation in POST /webhooks/sns
GHSA-xpqg-p8mp-7g44 published Mar 5, 2026 by driaug
Critical
Cross-project information disclosure via job status endpoints (IDOR)
GHSA-w4xp-395x-725j published Feb 19, 2026 by driaug
Moderate

Learn more about advisories related to useplunk/plunk in the GitHub Advisory Database