Plenix 2026.09.10 — Security maintenance: latest framework and email patches, and safer releases

Release 2026.09.10 is a security maintenance release. You don't need to do anything and nothing about how you use Plenix changes. It keeps the software Plenix is built on patched and makes each release safer to roll out.

Improvements

• Safer releases. Each update now waits until the platform confirms it is up and healthy before it is marked complete. If something is wrong, the release stops and the team is alerted at once, instead of the problem waiting to be found.
• More reliable updates. Security updates to the software Plenix depends on now always use the newest published versions, so a patch can't be delayed by an out-of-date copy.
• Tidier release housekeeping on our servers, so any change made directly on a server is flagged straight away instead of being quietly set aside.

Security

• Web framework updated to its latest security release on the Plenix app, the website and the help centre. This includes extra hardening that framework's maintainers published this month.
• About the recently reported Next.js flaw: Plenix was not affected. The issue is in a newer major version than the one we run, and in an image-generation feature we don't use. We applied the latest security update anyway.
• Email sending and inbound email processing (tickets by email, mailbox sync) are on the newest secure versions of their libraries. We confirmed email delivery end to end after the update.
• Third-party library advisories patched across the API, the app, the website and the help centre. Every dependency audit now reports zero known vulnerabilities.
• Old, unused server copies of past releases have been cleared out after a full check that nothing in them was missing from the live platform.