1 matches found
GHSA-XPH3-R2JF-4VP3 Haraka affected by DoS via `__proto__` email header
Summary Sending an email with proto: as a header name crashes the Haraka worker process. Details The header parser at nodemodules/haraka-email-message/lib/header.js:215-218 stores headers in a plain object: javascript addheaderkey, value, method this.headerskey ??= // line 216 this.headerskeymeth...
8.7CVSS5.9AI score0.00432EPSS
SaveExploits1References4
20