dadrus has 3 CVEs on record. 2 were published in the last 90 days. The median CVSS is 7.0 (high). The most common weakness class is CWE-20 (3). Most affected products: heimdall (2), github.com/dadrus/heimdall (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.0
- Publish → KEV
- —
- Last 90 days
- 2 prev 1
Worst active — by depth score
dadrus vulnerabilities
CVEs affecting dadrus, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-57209High· 7.0Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode
Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when Heimdall operates in proxy mode, it constructs the Forwarded HTTP header after executing the matched rule pipeline by ins…
CVE-2026-57210High· 7.0Heimdall: IP Spoofing via Unvalidated Forwarding Headers
Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when the trusted_proxies option is configured, heimdall extracts client IP addresses from the Forwarded (for= parameter) and X…
GHSA-4jgr-pg2m-m988HighHeimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode
Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode