Haraka vulnerabilities
We track 1 vulnerability in Haraka products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 2, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Haraka vulnerabilities
- 7.5 High severity
Haraka: Uncaught Exception
Haraka is a Node.js mail server. Prior to version 3.1.4, sending an email with __proto__: as a header name crashes the Haraka worker process. This issue has been patched in version 3.1.4.