Security
فارسی
All products

github.com/envoyproxy/envoy

Go · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
EnvoyProxy Envoy Missing HTTP URL path normalizationCVE-2019-9901 · GHSA-2WMF-P7F8-W42H github.com/envoyproxy/envoy Go Critical Fix reported
Envoy has RBAC Header Validation Bypass via Multi-Value Header ConcatenationCVE-2026-26308 · GHSA-GHC4-35X6-CRW5 github.com/envoyproxy/envoy Go High Fix reported
Envoy's global rate limit may crash when the response phase limit is enabled and the response phase request is failed directlyCVE-2026-26330 · GHSA-C23C-RP3M-VPG3 github.com/envoyproxy/envoy Go Medium No fix reported
Envoy vulnerable to crash for scoped ip address during DNSCVE-2026-26310 · GHSA-3CW6-2J68-868P github.com/envoyproxy/envoy Go Medium No fix reported
Envoy: HTTP - filter chain execution on reset streams causing UAF crashCVE-2026-26311 · GHSA-84XM-R438-86PX github.com/envoyproxy/envoy Go Medium No fix reported
Envoy affected by off-by-one write in JsonEscaper::escapeString()CVE-2026-26309 · GHSA-56CJ-WGG3-X943 github.com/envoyproxy/envoy Go Medium No fix reported
Envoy forwards early CONNECT data in TCP proxy modeCVE-2025-64763 · GHSA-RJ35-4M94-77JH github.com/envoyproxy/envoyOpenShift Service Mesh 2/openshift-service-mesh/grafana-rhel8 GoRed Hat Low Fix reported
Envoy's TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byteCVE-2025-66220 · GHSA-RWJG-C3H2-F57P github.com/envoyproxy/envoyOpenShift Service Mesh 3/openshift-service-mesh/istio-proxyv2-rhel9 GoRed Hat Medium Fix reported
Envoy crashes when JWT authentication is configured with the remote JWKS fetchingCVE-2025-64527 · GHSA-MP85-7MRQ-R866 github.com/envoyproxy/envoyOpenShift Service Mesh 2/openshift-service-mesh/grafana-rhel8 GoRed Hat Medium Fix reported
Envoy: Race condition in Dynamic Forward Proxy leads to use-after-free and segmentation faultsCVE-2025-54588 · GHSA-G9VW-6PVX-7GMW github.com/envoyproxy/envoy Go High Fix reported
Envoy crashes when HTTP ext_proc processes local repliesCVE-2025-30157 · GHSA-CF3Q-GQG7-3FM9 github.com/envoyproxy/envoy Go Medium Fix reported