Vulnerabilities

TI-2026-79759 CVE-2026-57210

IP spoofing in Heimdall via unvalidated forwarding headers

LOW 37

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service.

CVSS 4.0HIGH 7.0 Network No auth No interaction EPSS 0.00307 Published 2026-10-23 Fixed in 0.17.17 CWE-116

TI-2026-79758 CVE-2026-57209

HIGH 70

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service.

CVSS 4.0HIGH 7.0 Network No auth No interaction EPSS 0.00488 Published 2026-10-23 Fixed in 0.17.17 CWE-20

TI-2026-30585 CVE-2026-42274 · GHSA-3q34-rx83-r6mq

MEDIUM 40

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service.

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.00368 Published 2026-05-08 Fixed in 0.17.14 CWE-35

TI-2026-30584 CVE-2026-42273 · GHSA-72h4-mxfc-jx37

MEDIUM 40

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service.

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.00301 Published 2026-05-08 Fixed in 0.17.14 CWE-178

TI-2026-30583 CVE-2026-42272 · GHSA-43jv-5j4x-qv67

MEDIUM 42

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service.

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.00396 Published 2026-05-08 Fixed in 0.17.14 CWE-178

TI-2026-25280 CVE-2026-32811 · GHSA-r8x2-fhmf-6mxp

HIGH 75

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00319 Published 2026-03-20 Fixed in 0.17.11 CWE-116