CVE-2026-34975

CVE-2026-34975 — حقن رؤوس البريد الإلكتروني CRLF في Plunk عبر بناء MIME الخام الخطورة : عالية CVSS 8.5 CWE : CWE-93 — تحييد غير صحيح لتسلسلات CRLF 'حقن CRLF' المتأثر : useplunk/plunk جميع الإصدارات قبل الإصلاح الإشعار : GHSA NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-34975 TL;DR يقوم نقطة...

Exploit for CRLF Injection in Useplunk Plunk

CVE-2026-34975 — CRLF Email Header Injection in Plunk via raw...

CVE-2026-34975 Plunk has a CRLF Email Header Injection in raw MIME message construction allows authenticated API user to inject arbitrary email headers

Plunk is an open-source email platform built on top of AWS SES. Prior to 0.8.0, a CRLF header injection vulnerability was discovered in SESService.ts, where user-supplied values for from.name, subject, custom header keys/values, and attachment filenames were interpolated directly into raw MIME...

CVE-2026-34975 Plunk has a CRLF Email Header Injection in raw MIME message construction allows authenticated API user to inject arbitrary email headers

Plunk is an open-source email platform built on top of AWS SES. Prior to 0.8.0, a CRLF header injection vulnerability was discovered in SESService.ts, where user-supplied values for from.name, subject, custom header keys/values, and attachment filenames were interpolated directly into raw MIME...