Skip to content
Threat Feed

Tag

Plunk

1 brief RSS
high advisory

Plunk Email Platform CRLF Header Injection Vulnerability

A CRLF header injection vulnerability in Plunk versions prior to 0.8.0 allows authenticated API users to inject arbitrary email headers, enabling silent email forwarding, reply redirection, or sender spoofing.

crlf header-injection plunk cve-2026-34975 cloud
2r 1t 1c