Envoy (Envoyproxy) - vulnerabilities (CVEs)

127 CVEs, 1 in the last 30 days, 304 known versions, newest CVE from 2026-10-22. Vendor: Envoyproxy.

CVEs of Envoy

CVE-2026-111497 - CVSS 9.8 (critical), 2026-10-22: A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote…
CVE-2026-73511 - CVSS 5.3 (medium), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy normally matches…
CVE-2026-73553 - CVSS 7.5 (high), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, When…
CVE-2026-73551 - CVSS 5.3 (medium), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization…
CVE-2026-73546 - CVSS 7.4 (high), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's…
CVE-2026-73512 - CVSS 7.5 (high), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's…
CVE-2026-73550 - CVSS 7.5 (high), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy copies every…
CVE-2026-73547 - CVSS 7.5 (high), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ext_authz filter…
CVE-2026-48521 - CVSS 5.9 (medium), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's…
CVE-2026-73549 - CVSS 5.3 (medium), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's…
CVE-2026-73513 - CVSS 7.5 (high), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's optional oghttp2…
CVE-2026-73552 - CVSS 7.5 (high), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy HTTP RBAC accepts…
CVE-2026-73548 - CVSS 7.5 (high), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy forwards data for a…
CVE-2026-50572 - CVSS 5.9 (medium), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HTTP…
CVE-2026-48090 - CVSS 5.9 (medium), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, the HTTP OAuth2 filter…
CVE-2026-47220 - CVSS 7.5 (high), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, when the…
CVE-2026-47205 - CVSS 5.9 (medium), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.36.0 until 1.36.9, 1.37.5, and 1.38.3, a Use-After-Free (UAF)…
CVE-2026-47692 - CVSS 4.8 (medium), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, PROXY Protocol…
CVE-2026-47207 - CVSS 6.5 (medium), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, Envoy crashes if…
CVE-2026-48706 - CVSS 7.5 (high), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, a vulnerability…
CVE-2026-47204 - CVSS 7.5 (high), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.26.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the…
CVE-2026-47221 - CVSS 7.5 (high), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.18.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the router…
CVE-2026-48743 - CVSS 7.5 (high), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, Envoy can translate a…
CVE-2026-48497 - CVSS 7.5 (high), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, in cases where UDP DNS…
CVE-2026-48044 - CVSS 7.5 (high), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.23.0 until 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a vulnerability…
CVE-2026-48042 - CVSS 7.5 (high), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, destructor of JSON Object…
CVE-2026-47778 - CVSS 4.4 (medium), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a structural flaw was…
CVE-2026-47775 - CVSS 6.8 (medium), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, the OAuth2 HTTP filter's…
CVE-2026-47774 - CVSS 7.5 (high), 2026-06-17: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a vulnerability…
CVE-2026-26310 - CVSS 7.5 (high), 2026-03-10: Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, calling Utility::getAddressWithPort with a scoped IPv6…
CVE-2026-26330 - CVSS 7.5 (high), 2026-03-10: Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, At the rate limit filter, if the response phase limit…
CVE-2026-26311 - CVSS 5.9 (medium), 2026-03-10: Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, a logic vulnerability in Envoy's HTTP connection manager…
CVE-2026-26309 - CVSS 5.3 (medium), 2026-03-10: Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, an off-by-one write in Envoy::JsonEscaper::escapeString()…
CVE-2026-26308 - CVSS 8.2 (high), 2026-03-10: Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, the Envoy RBAC (Role-Based Access Control) filter…
CVE-2025-66220 - CVSS 7.1 (high), 2025-12-03: Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, Envoy’s mTLS certificate matcher for…
CVE-2025-64763 - CVSS 5.3 (medium), 2025-12-03: Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, when Envoy is configured in TCP proxy mode to handle…
CVE-2025-64527 - CVSS 6.5 (medium), 2025-12-03: Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, Envoy crashes when JWT authentication is configured…
CVE-2025-62504 - CVSS 7.5 (high), 2025-10-16: Envoy is an open source edge and service proxy. Envoy versions earlier than 1.36.2, 1.35.6, 1.34.10, and 1.33.12 contain a use-after-free vulnerability in the…
CVE-2025-62409 - CVSS 7.5 (high), 2025-10-16: Envoy is a cloud-native, open source edge and service proxy. Prior to 1.36.1, 1.35.5, 1.34.9, and 1.33.10, large requests and responses can potentially…
CVE-2025-55162 - CVSS 8.8 (high), 2025-09-03: Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In versions below 1.32.10 and 1.33.0 through…
CVE-2025-54588 - CVSS 7.5 (high), 2025-09-03: Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. Versions 1.34.0 through 1.34.4 and 1.35.0…
CVE-2025-46821 - CVSS 5.3 (medium), 2025-05-07: Envoy is a cloud-native edge/middle/service proxy. Prior to versions 1.34.1, 1.33.3, 1.32.6, and 1.31.8, Envoy's URI template matcher incorrectly excludes the…
CVE-2025-30157 - CVSS 7.5 (high), 2025-03-21: Envoy is a cloud-native high-performance edge/middle/service proxy. Prior to 1.33.1, 1.32.4, 1.31.6, and 1.30.10, Envoy's ext_proc HTTP filter is at risk of…
CVE-2024-53270 - CVSS 7.5 (high), 2024-12-18: Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions `sendOverloadError` is going to assume the active request exists when…
CVE-2024-53269 - CVSS 7.5 (high), 2024-12-18: Envoy is a cloud-native high-performance edge/middle/service proxy. When additional address are not ip addresses, then the Happy Eyeballs sorting algorithm…
CVE-2024-53271 - CVSS 7.1 (high), 2024-12-18: Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions envoy does not properly handle http 1.1 non-101 1xx responses. This…
CVE-2024-45810 - CVSS 7.5 (high), 2024-09-20: Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy will crash when the http async client is handling `sendLocalReply` under some…
CVE-2024-45809 - CVSS 7.5 (high), 2024-09-20: Envoy is a cloud-native high-performance edge/middle/service proxy. Jwt filter will lead to an Envoy crash when clear route cache with remote JWKs. In the…
CVE-2024-45808 - CVSS 6.5 (medium), 2024-09-20: Envoy is a cloud-native high-performance edge/middle/service proxy. A vulnerability has been identified in Envoy that allows malicious attackers to inject…
CVE-2024-45807 - CVSS 7.5 (high), 2024-09-20: Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's 1.31 is using `oghttp` as the default HTTP/2 codec, and there are potential bugs…
CVE-2024-45806 - CVSS 6.5 (medium), 2024-09-20: Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers,…
CVE-2024-39305 - CVSS 9.1 (critical), 2024-07-01: Envoy is a cloud-native, open source edge and service proxy. Prior to versions 1.30.4, 1.29.7, 1.28.5, and 1.27.7. Envoy references already freed memory when…
CVE-2024-34362 - CVSS 5.9 (medium), 2024-06-04: Envoy is a cloud-native, open source edge and service proxy. There is a use-after-free in `HttpConnectionManager` (HCM) with `EnvoyQuicServerStream` that can…
CVE-2024-32976 - CVSS 7.5 (high), 2024-06-04: Envoy is a cloud-native, open source edge and service proxy. Envoyproxy with a Brotli filter can get into an endless loop during decompression of Brotli data…
CVE-2024-34364 - CVSS 6.5 (medium), 2024-06-04: Envoy is a cloud-native, open source edge and service proxy. Envoy exposed an out-of-memory (OOM) vector from the mirror response, since async HTTP client…
CVE-2024-34363 - CVSS 7.5 (high), 2024-06-04: Envoy is a cloud-native, open source edge and service proxy. Due to how Envoy invoked the nlohmann JSON library, the library could throw an uncaught exception…
CVE-2024-32974 - CVSS 7.5 (high), 2024-06-04: Envoy is a cloud-native, open source edge and service proxy. A crash was observed in `EnvoyQuicServerStream::OnInitialHeadersComplete()` with following call…
CVE-2024-23326 - CVSS 8.2 (high), 2024-06-04: Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling vulnerability exists through Envoy if a server can be tricked…
CVE-2024-32975 - CVSS 7.5 (high), 2024-06-04: Envoy is a cloud-native, open source edge and service proxy. There is a crash at `QuicheDataReader::PeekVarInt62Length()`. It is caused by integer underflow…
CVE-2024-32475 - CVSS 7.5 (high), 2024-04-18: Envoy is a cloud-native, open source edge and service proxy. When an upstream TLS cluster is used with `auto_sni` enabled, a request containing a…
CVE-2024-30255 - CVSS 7.5 (high), 2024-04-04: Envoy is a cloud-native, open source edge and service proxy. The HTTP/2 protocol stack in Envoy versions prior to 1.29.3, 1.28.2, 1.27.4, and 1.26.8 are…
CVE-2024-27919 - CVSS 7.5 (high), 2024-04-04: Envoy is a cloud-native, open-source edge and service proxy. In versions 1.29.0 and 1.29.1, theEnvoy HTTP/2 protocol stack is vulnerable to the flood of…
CVE-2024-23325 - CVSS 7.5 (high), 2024-02-09: Envoy is a high-performance edge/middle/service proxy. Envoy crashes in Proxy protocol when using an address type that isn’t supported by the OS. Envoy is…
CVE-2024-23324 - CVSS 8.6 (high), 2024-02-09: Envoy is a high-performance edge/middle/service proxy. External authentication can be bypassed by downstream connections. Downstream clients can force invalid…
CVE-2024-23327 - CVSS 7.5 (high), 2024-02-09: Envoy is a high-performance edge/middle/service proxy. When PPv2 is enabled both on a listener and subsequent cluster, the Envoy instance will segfault when…
CVE-2024-23323 - CVSS 5.3 (medium), 2024-02-09: Envoy is a high-performance edge/middle/service proxy. The regex expression is compiled for every request and can result in high CPU usage and increased…
CVE-2024-23322 - CVSS 7.5 (high), 2024-02-09: Envoy is a high-performance edge/middle/service proxy. Envoy will crash when certain timeouts happen within the same interval. The crash occurs when the…
CVE-2023-44487 - CVSS 7.5 (high), 2023-10-10: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the…
CVE-2023-35944 - CVSS 8.2 (high), 2023-07-25: Envoy is an open source edge and service proxy designed for cloud-native applications. Envoy allows mixed-case schemes in HTTP/2, however, some internal…
CVE-2023-35943 - CVSS 7.5 (high), 2023-07-25: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, the…
CVE-2023-35942 - CVSS 6.5 (medium), 2023-07-25: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, gRPC…
CVE-2023-35941 - CVSS 9.8 (critical), 2023-07-25: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, a…
CVE-2023-35945 - CVSS 7.5 (high), 2023-07-13: Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy’s HTTP/2 codec may leak a header map and bookkeeping structures upon receiving…
CVE-2023-27493 - CVSS 9.1 (critical), 2023-04-04: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, Envoy…
CVE-2023-27496 - CVSS 7.5 (high), 2023-04-04: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, the OAuth…
CVE-2023-27492 - CVSS 6.5 (medium), 2023-04-04: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, the Lua…
CVE-2023-27491 - CVSS 9.1 (critical), 2023-04-04: Envoy is an open source edge and service proxy designed for cloud-native applications. Compliant HTTP/1 service should reject malformed request lines. Prior…
CVE-2023-27488 - CVSS 9.8 (critical), 2023-04-04: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9,…
CVE-2023-27487 - CVSS 9.1 (critical), 2023-04-04: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, the…
CVE-2022-29227 - CVSS 7.5 (high), 2022-06-09: Envoy is a cloud-native high-performance edge/middle/service proxy. In versions prior to 1.22.1 if Envoy attempts to send an internal redirect of an HTTP…
CVE-2022-29226 - CVSS 10 (critical), 2022-06-09: Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter implementation does not include a mechanism for validating access…
CVE-2022-29225 - CVSS 7.5 (high), 2022-06-09: Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 secompressors accumulate decompressed data into an intermediate buffer before…
CVE-2022-29228 - CVSS 7.5 (high), 2022-06-09: Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter would try to invoke the remaining filters in the chain after…
CVE-2022-29224 - CVSS 5.9 (medium), 2022-06-09: Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in the GrpcHealthCheckerImpl. Envoy can…
CVE-2022-21655 - CVSS 7.5 (high), 2022-02-22: Envoy is an open source edge and service proxy, designed for cloud-native applications. The envoy common router will segfault if an internal redirect selects…
CVE-2022-23606 - CVSS 6.5 (medium), 2022-02-22: Envoy is an open source edge and service proxy, designed for cloud-native applications. When a cluster is deleted via Cluster Discovery Service (CDS) all idle…
CVE-2022-21654 - CVSS 9.8 (critical), 2022-02-22: Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy's tls allows re-use when some cert validation settings have…
CVE-2022-21657 - CVSS 6.8 (medium), 2022-02-22: Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions Envoy does not restrict the set of certificates…
CVE-2022-21656 - CVSS 7.4 (high), 2022-02-22: Envoy is an open source edge and service proxy, designed for cloud-native applications. The default_validator.cc implementation used to implement the default…
CVE-2021-43825 - CVSS 7.5 (high), 2022-02-22: Envoy is an open source edge and service proxy, designed for cloud-native applications. Sending a locally generated response must stop further processing of…
CVE-2021-43824 - CVSS 7.5 (high), 2022-02-22: Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions a crafted request crashes Envoy when a CONNECT…
CVE-2021-43826 - CVSS 7.5 (high), 2022-02-22: Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions of Envoy a crash occurs when configured for…
CVE-2021-39206 - CVSS 8.6 (high), 2021-09-09: Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, contains two authorization related vulnerabilities CVE-2021-32777…
CVE-2021-39204 - CVSS 7.5 (high), 2021-09-09: Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, incorrectly handles resetting of HTTP/2 streams with excessive…
CVE-2021-39162 - CVSS 8.6 (high), 2021-09-09: Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, can abnormally terminate if an H/2 GOAWAY and SETTINGS frame are…
CVE-2021-32781 - CVSS 8.6 (high), 2021-08-24: Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions after Envoy sends a…
CVE-2021-32780 - CVSS 8.6 (high), 2021-08-24: Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions Envoy transitions a H/2…
CVE-2021-32779 - CVSS 8.6 (high), 2021-08-24: Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions envoy incorrectly…
CVE-2021-32778 - CVSS 7.5 (high), 2021-08-24: Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions envoy’s procedure for…
CVE-2021-32777 - CVSS 8.6 (high), 2021-08-24: Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions when ext-authz extension…