Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/01 10:56 p.m.7 views

GHSA-XPH3-R2JF-4VP3 Haraka affected by DoS via `__proto__` email header

Summary Sending an email with proto: as a header name crashes the Haraka worker process. Details The header parser at nodemodules/haraka-email-message/lib/header.js:215-218 stores headers in a plain object: javascript addheaderkey, value, method this.headerskey ??= // line 216 this.headerskeymeth...

8.7CVSS5.9AI score0.00432EPSS
SaveExploits1References4
Rows per page
Query Builder