TI-2026-25280 CVE-2026-32811 · GHSA-r8x2-fhmf-6mxp
Heimdall: Path received via Envoy gRPC corrupted when containing query string
Priority HIGH 75
Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service.
dadrus
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
dadrus records in CISA KEVNo dadrus vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
Priority HIGH 70
Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service.
TI-2026-30583 CVE-2026-42272 · GHSA-43jv-5j4x-qv67
Heimdall: Case-sensitive handling of URL-encoded slashes may lead to inconsistent path interpretation
Priority MEDIUM 42
Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service.
TI-2026-30585 CVE-2026-42274 · GHSA-3q34-rx83-r6mq
Heimdall: Authorization bypass via path normalization mismatch
Priority MEDIUM 40
Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service.
TI-2026-30584 CVE-2026-42273 · GHSA-72h4-mxfc-jx37
Heimdall: Case-sensitive host matching may lead to policy bypass
Priority MEDIUM 40
Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service.
Priority LOW 37
Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service.