Advisories for Npm/Haraka package

Sending an email with proto: as a header name crashes the Haraka worker process.

Haraka comes with a plugin for processing attachments for zip files. can be vulnerable to command injection.