https://github.com/dadrus/heimdall

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.0

CVE-2026-57210

Heimdall: IP Spoofing via Unvalidated Forwarding Headers

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when the trusted_proxies option is configured, heimdall extracts client IP addresses from the Forwarded (for= parameter) and X-Forwarded-For headers…

dadrus heimdall github.com/dadrus/heimdall https://github.com/dadrus/heimdall Go

Oct 23, 2026