Envoyproxy - vulnerabilities (CVEs)
137 CVEs in 2 products, 1 in the last 30 days, newest from 2026-10-22.
Products
Newest CVEs of Envoyproxy
- CVE-2026-111497 - CVSS 9.8 (critical), 2026-10-22: A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote…
- CVE-2026-73511 - CVSS 5.3 (medium), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy normally matches…
- CVE-2026-73553 - CVSS 7.5 (high), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, When…
- CVE-2026-73551 - CVSS 5.3 (medium), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's URL normalization…
- CVE-2026-73546 - CVSS 7.4 (high), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's…
- CVE-2026-73512 - CVSS 7.5 (high), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's…
- CVE-2026-73550 - CVSS 7.5 (high), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy copies every…
- CVE-2026-73547 - CVSS 7.5 (high), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ext_authz filter…
- CVE-2026-48521 - CVSS 5.9 (medium), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's…
- CVE-2026-73549 - CVSS 5.3 (medium), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's…
- CVE-2026-73513 - CVSS 7.5 (high), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's optional oghttp2…
- CVE-2026-73552 - CVSS 7.5 (high), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy HTTP RBAC accepts…
- CVE-2026-73548 - CVSS 7.5 (high), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy forwards data for a…
- CVE-2026-50572 - CVSS 5.9 (medium), 2026-09-21: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HTTP…
- CVE-2026-53714 - CVSS 7.4 (high), 2026-09-14: Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS…
- CVE-2026-53716 - CVSS 6.5 (medium), 2026-09-14: Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1,…
- CVE-2026-53715 - CVSS 5.3 (medium), 2026-09-14: Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1,…
- CVE-2026-53719 - CVSS 6.5 (medium), 2026-09-14: Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1,…
- CVE-2026-53718 - CVSS 6.4 (medium), 2026-09-14: Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, an…
- CVE-2026-53713 - CVSS 9.1 (critical), 2026-09-14: Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1,…
- CVE-2026-53717 - CVSS 6.5 (medium), 2026-09-14: Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1,…
- CVE-2026-48090 - CVSS 5.9 (medium), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, the HTTP OAuth2 filter…
- CVE-2026-47220 - CVSS 7.5 (high), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, when the…
- CVE-2026-47205 - CVSS 5.9 (medium), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.36.0 until 1.36.9, 1.37.5, and 1.38.3, a Use-After-Free (UAF)…
- CVE-2026-47692 - CVSS 4.8 (medium), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, PROXY Protocol…
- CVE-2026-47207 - CVSS 6.5 (medium), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, Envoy crashes if…
- CVE-2026-48706 - CVSS 7.5 (high), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, a vulnerability…
- CVE-2026-47204 - CVSS 7.5 (high), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.26.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the…
- CVE-2026-47221 - CVSS 7.5 (high), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.18.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the router…
- CVE-2026-48743 - CVSS 7.5 (high), 2026-06-26: Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, Envoy can translate a…
