Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/18 1:0 p.m.58 views

Heimdall: Path received via Envoy gRPC corrupted when containing query string

Summary When using heimdall in envoy gRPC decision API mode, wrong encoding of the query URL string allows rules with non-wildcard path expressions to be bypassed. The HTTP based decision API is NOT affected, and proxy mode is NOT affected either. Note: The issue can only lead to unintended acces...

8.2CVSS5.7AI score0.003EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder