Heimdall has an authorization bypass via path normalization mismatch
Modified: 6/25/2026
package
pkg:go/github.com/dadrus/heimdall
Heimdall has an authorization bypass via path normalization mismatch
Modified: 6/25/2026
Heimdall: Case-sensitive handling of URL-encoded slashes may lead to inconsistent path interpretation
Modified: 6/25/2026
Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode
Modified: 7/20/2026
Heimdall: Case-sensitive host matching may lead to policy bypass
Modified: 6/25/2026
Heimdall: Path received via Envoy gRPC corrupted when containing query string
Modified: 4/27/2026
Heimdall: Path received via Envoy gRPC corrupted when containing query string in github.com/dadrus/heimdall
Modified: 3/23/2026
Heimdall: IP Spoofing via Unvalidated Forwarding Headers in github.com/dadrus/heimdall
Modified: 8/11/2026
Heimdall has an authorization bypass via path normalization mismatch in github.com/dadrus/heimdall
Modified: 6/25/2026
Heimdall: Case-sensitive handling of URL-encoded slashes may lead to inconsistent path interpretation in github.com/dadrus/heimdall
Modified: 6/25/2026
Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode in github.com/dadrus/heimdall
Modified: 7/20/2026
Heimdall: Case-sensitive host matching may lead to policy bypass in github.com/dadrus/heimdall
Modified: 6/25/2026