Browse CVEs

HIGH 7.5 CVE-2026-47220 Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, when the %REQUESTED_SERVE… Envoy 1.37.5 / 1.38.3+ Fix from $1,9502026-06-26 MEDIUM 5.9 CVE-2026-48090 Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, the HTTP OAuth2 filter (e… Envoy 1.37.5 / 1.38.3+ Fix from $1,6002026-06-26 MEDIUM 5.9 CVE-2026-47205 Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.36.0 until 1.36.9, 1.37.5, and 1.38.3, a Use-After-Free… Envoy 1.36.9 / 1.37.5+ Fix from $1,6002026-06-26 HIGH 7.5 CVE-2026-48706 Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, a vulne… Envoy 1.35.13 / 1.36.9+ Fix from $1,9502026-06-26 HIGH 7.5 CVE-2026-48743 Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, Envoy can transl… Envoy 1.35.13 / 1.36.9+ Fix from $1,9502026-06-26 HIGH 7.5 CVE-2026-47221 Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.18.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the rou… Envoy 1.35.13 / 1.36.9+ Fix from $1,9502026-06-26 HIGH 7.5 CVE-2026-48042 Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, destructor of JS… Envoy 1.35.13 / 1.36.9+ Fix from $1,9502026-06-26 HIGH 7.5 CVE-2026-48044 Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.23.0 until 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a vuln… Envoy 1.35.13 / 1.36.9+ Fix from $1,9502026-06-26 HIGH 7.5 CVE-2026-48497 Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, in cases where U… Envoy 1.35.13 / 1.36.9+ Fix from $1,9502026-06-26 MEDIUM 6.8 CVE-2026-47775 Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, the OAuth2 HTTP … Envoy 1.35.11 / 1.36.7+ Fix from $1,6002026-06-26 HIGH 7.5 CVE-2026-47204 Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.26.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the env… Envoy 1.35.13 / 1.36.9+ Fix from $1,9502026-06-26 MEDIUM 6.5 CVE-2026-47207 Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, Envoy c… Envoy 1.35.13 / 1.36.9+ Fix from $1,6002026-06-26 HIGH 7.5 CVE-2026-26310 Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, calling Utility::getAddressWithPort with a scope… Envoy 1.34.13 / 1.35.8+ Fix from $1,9502026-03-10 HIGH 7.5 CVE-2026-26330 Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, At the rate limit filter, if the response phase … Envoy 1.34.13 / 1.35.8+ Fix from $1,9502026-03-10 MEDIUM 5.9 CVE-2026-26311 Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, a logic vulnerability in Envoy's HTTP connection… Envoy 1.34.13 / 1.35.8+ Fix from $1,6002026-03-10 HIGH 8.2 CVE-2026-26308 Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, the Envoy RBAC (Role-Based Access Control) filte… Envoy 1.34.13 / 1.35.8+ Fix from $1,9502026-03-10 MEDIUM 5.3 CVE-2026-26309 Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, an off-by-one write in Envoy::JsonEscaper::escap… Envoy 1.34.13 / 1.35.8+ Fix from $1,6002026-03-10 HIGH 8.8 CVE-2026-22771 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, E… Gateway 1.5.7 / 1.6.2+ Fix from $1,9502026-01-12 HIGH 7.1 CVE-2025-66220 Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, Envoy’s mTLS certificate matcher for match_t… Envoy 1.33.13 / 1.34.11+ Fix from $1,9502025-12-03 MEDIUM 5.3 CVE-2025-64763 Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, when Envoy is configured in TCP proxy mode t… Envoy 1.33.13 / 1.34.11+ Fix from $1,6002025-12-03 MEDIUM 6.5 CVE-2025-64527 Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, Envoy crashes when JWT authentication is con… Envoy 1.33.13 / 1.34.11+ Fix from $1,6002025-12-03 HIGH 7.5 CVE-2025-62504 Envoy is an open source edge and service proxy. Envoy versions earlier than 1.36.2, 1.35.6, 1.34.10, and 1.33.12 contain a use-after-free vulnerabili… Envoy 1.33.12 / 1.34.10+ Fix from $1,9502025-10-16 HIGH 7.5 CVE-2025-62409 Envoy is a cloud-native, open source edge and service proxy. Prior to 1.36.1, 1.35.5, 1.34.9, and 1.33.10, large requests and responses can potential… Envoy 1.33.11 / 1.34.9+ Fix from $1,9502025-10-16 HIGH 8.8 CVE-2025-55162 Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In versions below 1.32.10 and 1.33.0… Envoy 1.32.10 / 1.34.5+ Fix from $1,9502025-09-03 HIGH 7.5 CVE-2025-54588 Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. Versions 1.34.0 through 1.34.4 and 1… Envoy 1.34.5+ Fix from $1,9502025-09-03 MEDIUM 5.3 CVE-2025-46821 Envoy is a cloud-native edge/middle/service proxy. Prior to versions 1.34.1, 1.33.3, 1.32.6, and 1.31.8, Envoy's URI template matcher incorrectly exc… Envoy 1.31.8 / 1.32.6+ Fix from $1,6002025-05-07 HIGH 7.5 CVE-2025-30157 Envoy is a cloud-native high-performance edge/middle/service proxy. Prior to 1.33.1, 1.32.4, 1.31.6, and 1.30.10, Envoy's ext_proc HTTP filter is at … Envoy 1.30.10 / 1.31.6+ Fix from $1,9502025-03-21 MEDIUM 5.3 CVE-2025-25294 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. In all Envoy Gateway versio… Gateway 1.2.7 / 1.3.1+ Fix from $1,6002025-03-06 HIGH 7.1 CVE-2025-24030 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. A user with access to the K… Gateway 1.2.6+ Fix from $1,9502025-01-23 HIGH 7.5 CVE-2024-53269 Envoy is a cloud-native high-performance edge/middle/service proxy. When additional address are not ip addresses, then the Happy Eyeballs sorting alg… Envoy 1.30.8 / 1.31.4+ Fix from $1,9502024-12-18