CVE-2026-34752 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Haraka is a Node.js mail server. Prior to version 3.1.4, sending an email with __proto__: as a header name crashes the Haraka worker process. This issue has bee…
High CVSS: 8.7

CVE-2026-34752

Haraka is a Node.js mail server. Prior to version 3.1.4, sending an email with __proto__: as a header name crashes the Haraka worker process. This issue has been patched in version 3.1.4.
Vendor
Haraka Project
Product
Haraka
CWE
CWE-248
Yayın Tarihi
2026-04-02 19:21:33
Güncelleme
2026-04-03 19:50:42
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-248 Haraka HIGH Haraka Project 2026

Referanslar

https://github.com/haraka/Haraka/releases/tag/v3.1.4 https://github.com/haraka/Haraka/security/advisories/GHSA-xph3-r2jf-4vp3