Go/github.com/dadrus/heimdall CVE-2026-57209: unknown, EPSS 0.34%

Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode in github.com/dadrus/heimdall

Action: Upgrade github.com/dadrus/heimdall to 0.17.17 or later.

go get github.com/dadrus/heimdall@v0.17.17

Affected

Fixed versions

Sources

• osv: GO-2026-5125
• https://github.com/dadrus/heimdall/security/advisories/GHSA-4jgr-pg2m-m988

CVE-2026-57209 · published 2026-06-25T18:26:48Z · modified 2026-07-20T21:56:16.566999339Z · JSON