cbcvebase.

Linuxserver Docker-Heimdall vulnerabilities

1 known vulnerability affecting linuxserver/docker-heimdall.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-50578P2CRITICALCVSS 9.8PoCv2.6.3-ls3072025-07-30
CVE-2025-50578 [CRITICAL] CWE-20 CVE-2025-50578: LinuxServer.io heimdall 2.6.3-ls307 contains a vulnerability in how it handles user-supplied HTTP he LinuxServer.io heimdall 2.6.3-ls307 contains a vulnerability in how it handles user-supplied HTTP headers, specifically `X-Forwarded-Host` and `Referer`. An unauthenticated remote attacker can manipulate these headers to perform Host Header Injection and Open Redirect attacks. This allows the loading of external resources from attacker-controlled d
nvd
Linuxserver Docker-Heimdall vulnerabilities | cvebase