Haraka Project Haraka
2 CVEs affecting Haraka Project Haraka. Latest disclosed: 2026-04-02. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-1000282 | Critical | 9.8 | 2019-02-05 | Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injectio… |
CVE-2026-34752 | High | 7.5 | 2026-04-02 | Haraka is a Node.js mail server. Prior to version 3.1.4, sending an email with __proto__: as a header name crashes the Haraka worker process. This issue has be… |