Path Traversal in Dadrus Heimdall
CVE-2026-42274
Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall performs rule matching on the raw (non-normalized) request path, while downstream components may normalize dot-segments…
EPSS: 0.004 (29.1th percentile) — read the EPSS interpretation.
Affected products
- Dadrus Heimdall — versions < 0.17.14
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)