https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T22:41:31.393440+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-42273 CVE-2026-42273 — Heimdall: Case-sensitive host matching may lead to policy bypass 2026-10-08T22:41:31.411026+00:00

Affected: dadrus heimdall

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall performs host matching in a case-sensitive manner, while HTTP hostnames are case-insensitive. This discrepancy can result in heimdall failing to match a rule for a request host that differs only in letter casing, potentially causing the request to be classified differently than intended. This issue has been patched in version 0.17.14.