Improper Neutralization of Special Elements used in a Command ('Command Injection')
Haraka comes with a plugin for processing attachments for zip files. can be vulnerable to command injection.
Advisories for Npm/Haraka package
2019
Haraka comes with a plugin for processing attachments for zip files. can be vulnerable to command injection.