haraka vulnerabilities

CVEs whose affected-version data names the haraka package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-34752High· 7.5

6mo ago

Haraka is a Node.js mail server

Haraka is a Node.js mail server. Prior to version 3.1.4, sending an email with __proto__: as a header name crashes the Haraka worker process. This issue has been patched in version 3.1.4.

▾ Twilightharaka_project · harakaEPSS 0.52%via NVD