CVE-2026-32096

CVE-2026-32096 SSRF via unvalidated AWS SNS SubscriptionConfirmation inuseplunk/plunk Summary The Plunk API endpoint POST /webhooks/sns fetches an attacker-supplied SubscribeURL without verifying the AWS SNS cryptographic signature. An unauthenticated attacker can force the server to make arbitra...