Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-34752
7.5
HIGHCVSS v3
Published
April 2, 2026
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
Haraka is a Node.js mail server. Prior to version 3.1.4, sending an email with __proto__: as a header name crashes the Haraka worker process. This issue has been patched in version 3.1.4.
GitHub