https://github.com/dadrus/heimdall vulnerabilities
CVEs whose affected-version data names the https://github.com/dadrus/heimdall package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-57210HighHeimdall: IP Spoofing via Unvalidated Forwarding Headers
Heimdall: IP Spoofing via Unvalidated Forwarding Headers
▾ Twilighthttps: · https://github.com/dadrus/heimdallvia OSV
GHSA-38x9-25wx-7fg2HighHeimdall: IP Spoofing via Unvalidated Forwarding Headers
Heimdall: IP Spoofing via Unvalidated Forwarding Headers
▾ Twilighthttps: · https://github.com/dadrus/heimdallvia GHSA