https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T02:24:36.186709+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-32096 CVE-2026-32096 — Plunk has SSRF via unvalidated AWS SNS SubscriptionConfirmation in POST /webhooks/sns 2026-10-08T02:24:36.201014+00:00

Affected: useplunk plunk

Plunk is an open-source email platform built on top of AWS SES. Prior to 0.7.0, a Server-Side Request Forgery (SSRF) vulnerability existed in the SNS webhook handler. An unauthenticated attacker could send a crafted request that caused the server to make an arbitrary outbound HTTP GET request to any host accessible from the server. This vulnerability is fixed in 0.7.0.