Linuxserver Docker-heimdall — known CVE vulnerabilities

Every CVE whose affected-product data names Linuxserver Docker-heimdall, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2025-50578 — CVSS 9.8 (critical): LinuxServer.io heimdall 2.6.3-ls307 contains a vulnerability in how it handles user-supplied HTTP headers, specifically `X-Forwarded-Host`…