dadrus heimdall

• CVE-2026-57210 High 7.0 Heimdall: IP Spoofing via Unvalidated Forwarding Headers 0.3%
• CVE-2026-57209 High 7.0 Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode 0.5%
• CVE-2026-42274 High 7.8 Heimdall: Authorization bypass via path normalization mismatch 0.4%
• CVE-2026-42273 High 7.8 Heimdall: Case-sensitive host matching may lead to policy bypass 0.3%
• CVE-2026-42272 High 7.8 Heimdall: Case-sensitive handling of URL-encoded slashes may lead to inconsistent path interpretation 0.4%
• CVE-2026-32811 High 8.2 Heimdall: Path received via Envoy gRPC corrupted when containing query string 0.3%