Security
فارسی
All products

github.com/envoyproxy/gateway

Go · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorizationCVE-2026-53719 · GHSA-M2V6-2JMH-4C68Version ranges need review. github.com/envoyproxy/gatewayRed Hat Connectivity Link 1/rhcl-1/rhcl-operator-bundle GoRed Hat Medium Fix reported
Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limitCVE-2026-53716 · GHSA-CXPQ-8V7Q-CG56Version ranges need review. github.com/envoyproxy/gatewayRed Hat Connectivity Link 1/rhcl-1/rhcl-operator-bundle GoRed Hat Medium Fix reported
Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypassCVE-2026-53718 · GHSA-FCRP-7GC2-93G7Version ranges need review. github.com/envoyproxy/gatewayRed Hat Connectivity Link 1/rhcl-1/rhcl-operator-bundle GoRed Hat Medium Fix reported
Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret DisclosureCVE-2026-53713 · GHSA-WCRF-9VRR-854FVersion ranges need review. github.com/envoyproxy/gatewayRed Hat Connectivity Link 1/rhcl-1/rhcl-rhel9-operator GoRed Hat Critical Fix reported
Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar headerCVE-2026-53717 · GHSA-H7PQ-86H8-RP5XVersion ranges need review. github.com/envoyproxy/gatewayRed Hat Connectivity Link 1/rhcl-1/rhcl-operator-bundle GoRed Hat Medium Fix reported
Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode CVE-2026-53714 · GHSA-22XC-XG2R-9J7VVersion ranges need review. github.com/envoyproxy/gateway Go High Fix reported
Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lockCVE-2026-53715 · GHSA-8FV2-88GG-HM7QVersion ranges need review. github.com/envoyproxy/gatewayRed Hat Connectivity Link 1/rhcl-1/rhcl-operator-bundle GoRed Hat Medium Fix reported
Envoy Admin Interface Exposed through prometheus metrics endpointCVE-2025-24030 · GHSA-J777-63HF-HX76Version ranges need review. github.com/envoyproxy/gatewayRed Hat Connectivity Link 1/rhcl-operator-bundle-container GoRed Hat High Fix reported
Envoy Gateway Log Injection VulnerabilityCVE-2025-25294 · GHSA-MF24-CHXH-HMVJVersion ranges need review. github.com/envoyproxy/gatewayRed Hat Connectivity Link 1/rhcl-operator-bundle-container GoRed Hat Medium Fix reported
Envoy Extension Policy lua scripts injection causes arbitrary command executionCVE-2026-22771 · GHSA-XRWG-MQJ6-6M22Version ranges need review. github.com/envoyproxy/gateway Go High Fix reported