Skip to content
OpenAdvisories

Vendor

superplanehq

2 known vulnerabilities.

Products

superplane 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-57511

    SuperPlane < 0.30.0 SMTP Header Injection via Webhook Event Title

    SuperPlane before 0.30.0 contains an SMTP header injection vulnerability that allows unauthenticated attackers to inject arbitrary SMTP headers by including CRLF sequences in the event payload title field delivered via webhook. Attackers can manipulate the un…

    superplanehq superplane