What’s Vulnerable › Products

dadrus heimdall vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your dadrus heimdall version is affected

Latest dadrus heimdall vulnerabilities

• CVE-2026-57210 — Heimdall: IP Spoofing via Unvalidated Forwarding Headers (CVSS 7.0)
• CVE-2026-57209 — Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode (CVSS 7.0)
• CVE-2026-42274 — Heimdall: Authorization bypass via path normalization mismatch (CVSS 7.8)
• CVE-2026-42273 — Heimdall: Case-sensitive host matching may lead to policy bypass (CVSS 7.8)
• CVE-2026-42272 — Heimdall: Case-sensitive handling of URL-encoded slashes may lead to inconsistent path interpretation (CVSS 7.8)
• CVE-2026-32811 — Heimdall: Path received via Envoy gRPC corrupted when containing query string (CVSS 7.5)