{"schema_version":1,"title":"Dadrus vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 5 vulnerabilities in Dadrus: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, dadrus Heimdall Forwarded header injection in proxy mode, was published on 18 June 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/dadrus","json_url":"https://junglewise.ai/threats/vendors/dadrus.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/dadrus","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":5,"all_time":5,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":5},"latest":[{"cvss":7,"slug":"dadrus-heimdall-forwarded-header-injection-in-proxy-mode-2381b9a6","title":"dadrus Heimdall Forwarded header injection in proxy mode","severity":"high","exploited":false,"published_at":"2026-06-18T14:24:41+00:00","url":"https://junglewise.ai/threats/dadrus-heimdall-forwarded-header-injection-in-proxy-mode-2381b9a6"},{"cvss":7,"slug":"dadrus-heimdall-ip-spoofing-via-unvalidated-forwarding-headers-1f7f897d","title":"dadrus Heimdall IP spoofing via unvalidated forwarding headers","severity":"high","exploited":false,"published_at":"2026-06-18T14:24:37+00:00","url":"https://junglewise.ai/threats/dadrus-heimdall-ip-spoofing-via-unvalidated-forwarding-headers-1f7f897d"},{"cve":"CVE-2026-42274","cvss":4,"epss":0.0054,"slug":"cve-2026-42274-dadrus-heimdall-authorization-bypass-via-path-normalization","title":"dadrus Heimdall authorization bypass via path normalization mismatch","severity":"high","exploited":false,"published_at":"2026-04-25T23:30:46+00:00","url":"https://junglewise.ai/threats/cve-2026-42274-dadrus-heimdall-authorization-bypass-via-path-normalization"},{"cve":"CVE-2026-42273","cvss":4,"epss":0.0052,"slug":"cve-2026-42273-dadrus-heimdall-case-sensitive-host-matching-policy-bypass","title":"Dadrus Heimdall case-sensitive host matching policy bypass","severity":"high","exploited":false,"published_at":"2026-04-25T23:30:18+00:00","url":"https://junglewise.ai/threats/cve-2026-42273-dadrus-heimdall-case-sensitive-host-matching-policy-bypass"},{"cve":"CVE-2026-42272","cvss":4,"epss":0.0055,"slug":"cve-2026-42272-dadrus-heimdall-authorization-bypass-via-case-sensitive-url","title":"dadrus Heimdall authorization bypass via case-sensitive URL encoding","severity":"high","exploited":false,"published_at":"2026-04-25T23:29:40+00:00","url":"https://junglewise.ai/threats/cve-2026-42272-dadrus-heimdall-authorization-bypass-via-case-sensitive-url"}],"vendor":{"hub":true,"name":"Dadrus","slug":"dadrus","homepage":"https://github.com/dadrus","description":"dadrus is an open-source developer focused on identity and access management solutions.","url":"https://junglewise.ai/threats/vendors/dadrus"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cvss":7,"slug":"dadrus-heimdall-forwarded-header-injection-in-proxy-mode-2381b9a6","title":"dadrus Heimdall Forwarded header injection in proxy mode","severity":"high","exploited":false,"published_at":"2026-06-18T14:24:41+00:00","url":"https://junglewise.ai/threats/dadrus-heimdall-forwarded-header-injection-in-proxy-mode-2381b9a6"},{"cvss":7,"slug":"dadrus-heimdall-ip-spoofing-via-unvalidated-forwarding-headers-1f7f897d","title":"dadrus Heimdall IP spoofing via unvalidated forwarding headers","severity":"high","exploited":false,"published_at":"2026-06-18T14:24:37+00:00","url":"https://junglewise.ai/threats/dadrus-heimdall-ip-spoofing-via-unvalidated-forwarding-headers-1f7f897d"},{"cve":"CVE-2026-42272","cvss":4,"epss":0.0055,"slug":"cve-2026-42272-dadrus-heimdall-authorization-bypass-via-case-sensitive-url","title":"dadrus Heimdall authorization bypass via case-sensitive URL encoding","severity":"high","exploited":false,"published_at":"2026-04-25T23:29:40+00:00","url":"https://junglewise.ai/threats/cve-2026-42272-dadrus-heimdall-authorization-bypass-via-case-sensitive-url"},{"cve":"CVE-2026-42274","cvss":4,"epss":0.0054,"slug":"cve-2026-42274-dadrus-heimdall-authorization-bypass-via-path-normalization","title":"dadrus Heimdall authorization bypass via path normalization mismatch","severity":"high","exploited":false,"published_at":"2026-04-25T23:30:46+00:00","url":"https://junglewise.ai/threats/cve-2026-42274-dadrus-heimdall-authorization-bypass-via-path-normalization"},{"cve":"CVE-2026-42273","cvss":4,"epss":0.0052,"slug":"cve-2026-42273-dadrus-heimdall-case-sensitive-host-matching-policy-bypass","title":"Dadrus Heimdall case-sensitive host matching policy bypass","severity":"high","exploited":false,"published_at":"2026-04-25T23:30:18+00:00","url":"https://junglewise.ai/threats/cve-2026-42273-dadrus-heimdall-case-sensitive-host-matching-policy-bypass"}],"generated_at":"2026-09-26T15:07:00.181821+00:00","technologies":[{"name":"Dadrus Heimdall","slug":"heimdall","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/heimdall"}]}