Vulnerability index

Browse CVEs

107 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Envoy HIGH 7.5
CVE-2026-47220

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, when the %REQUESTED_SERVE…

Fix: 1.37.5 / 1.38.3+
Fix from $1,950 2026-06-26
Envoy MEDIUM 5.9
CVE-2026-48090

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, the HTTP OAuth2 filter (e…

Fix: 1.37.5 / 1.38.3+
Fix from $1,600 2026-06-26
Envoy MEDIUM 5.9
CVE-2026-47205

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.36.0 until 1.36.9, 1.37.5, and 1.38.3, a Use-After-Free…

Fix: 1.36.9 / 1.37.5+
Fix from $1,600 2026-06-26
Envoy HIGH 7.5
CVE-2026-48706

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, a vulne…

Fix: 1.35.13 / 1.36.9+
Fix from $1,950 2026-06-26
Envoy HIGH 7.5
CVE-2026-48743

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, Envoy can transl…

Fix: 1.35.13 / 1.36.9+
Fix from $1,950 2026-06-26
Envoy HIGH 7.5
CVE-2026-47221

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.18.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the rou…

Fix: 1.35.13 / 1.36.9+
Fix from $1,950 2026-06-26
Envoy HIGH 7.5
CVE-2026-48042

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, destructor of JS…

Fix: 1.35.13 / 1.36.9+
Fix from $1,950 2026-06-26
Envoy HIGH 7.5
CVE-2026-48044

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.23.0 until 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a vuln…

Fix: 1.35.13 / 1.36.9+
Fix from $1,950 2026-06-26
Envoy HIGH 7.5
CVE-2026-48497

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, in cases where U…

Fix: 1.35.13 / 1.36.9+
Fix from $1,950 2026-06-26
Envoy MEDIUM 6.8
CVE-2026-47775

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, the OAuth2 HTTP …

Fix: 1.35.11 / 1.36.7+
Fix from $1,600 2026-06-26
Envoy HIGH 7.5
CVE-2026-47204

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.26.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the env…

Fix: 1.35.13 / 1.36.9+
Fix from $1,950 2026-06-26
Envoy MEDIUM 6.5
CVE-2026-47207

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, Envoy c…

Fix: 1.35.13 / 1.36.9+
Fix from $1,600 2026-06-26
Envoy HIGH 7.5
CVE-2026-26310

Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, calling Utility::getAddressWithPort with a scope…

Fix: 1.34.13 / 1.35.8+
Fix from $1,950 2026-03-10
Envoy HIGH 7.5
CVE-2026-26330

Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, At the rate limit filter, if the response phase …

Fix: 1.34.13 / 1.35.8+
Fix from $1,950 2026-03-10
Envoy MEDIUM 5.9
CVE-2026-26311

Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, a logic vulnerability in Envoy's HTTP connection…

Fix: 1.34.13 / 1.35.8+
Fix from $1,600 2026-03-10
Envoy HIGH 8.2
CVE-2026-26308

Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, the Envoy RBAC (Role-Based Access Control) filte…

Fix: 1.34.13 / 1.35.8+
Fix from $1,950 2026-03-10
Envoy MEDIUM 5.3
CVE-2026-26309

Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, an off-by-one write in Envoy::JsonEscaper::escap…

Fix: 1.34.13 / 1.35.8+
Fix from $1,600 2026-03-10
Gateway HIGH 8.8
CVE-2026-22771

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, E…

Fix: 1.5.7 / 1.6.2+
Fix from $1,950 2026-01-12
Envoy HIGH 7.1
CVE-2025-66220

Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, Envoy’s mTLS certificate matcher for match_t…

Fix: 1.33.13 / 1.34.11+
Fix from $1,950 2025-12-03
Envoy MEDIUM 5.3
CVE-2025-64763

Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, when Envoy is configured in TCP proxy mode t…

Fix: 1.33.13 / 1.34.11+
Fix from $1,600 2025-12-03
Envoy MEDIUM 6.5
CVE-2025-64527

Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, Envoy crashes when JWT authentication is con…

Fix: 1.33.13 / 1.34.11+
Fix from $1,600 2025-12-03
Envoy HIGH 7.5
CVE-2025-62504

Envoy is an open source edge and service proxy. Envoy versions earlier than 1.36.2, 1.35.6, 1.34.10, and 1.33.12 contain a use-after-free vulnerabili…

Fix: 1.33.12 / 1.34.10+
Fix from $1,950 2025-10-16
Envoy HIGH 7.5
CVE-2025-62409

Envoy is a cloud-native, open source edge and service proxy. Prior to 1.36.1, 1.35.5, 1.34.9, and 1.33.10, large requests and responses can potential…

Fix: 1.33.11 / 1.34.9+
Fix from $1,950 2025-10-16
Envoy HIGH 8.8
CVE-2025-55162

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In versions below 1.32.10 and 1.33.0…

Fix: 1.32.10 / 1.34.5+
Fix from $1,950 2025-09-03
Envoy HIGH 7.5
CVE-2025-54588

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. Versions 1.34.0 through 1.34.4 and 1…

Fix: 1.34.5+
Fix from $1,950 2025-09-03
Envoy MEDIUM 5.3
CVE-2025-46821

Envoy is a cloud-native edge/middle/service proxy. Prior to versions 1.34.1, 1.33.3, 1.32.6, and 1.31.8, Envoy's URI template matcher incorrectly exc…

Fix: 1.31.8 / 1.32.6+
Fix from $1,600 2025-05-07
Envoy HIGH 7.5
CVE-2025-30157

Envoy is a cloud-native high-performance edge/middle/service proxy. Prior to 1.33.1, 1.32.4, 1.31.6, and 1.30.10, Envoy's ext_proc HTTP filter is at …

Fix: 1.30.10 / 1.31.6+
Fix from $1,950 2025-03-21
Gateway MEDIUM 5.3
CVE-2025-25294

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. In all Envoy Gateway versio…

Fix: 1.2.7 / 1.3.1+
Fix from $1,600 2025-03-06
Gateway HIGH 7.1
CVE-2025-24030

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. A user with access to the K…

Fix: 1.2.6+
Fix from $1,950 2025-01-23
Envoy HIGH 7.5
CVE-2024-53269

Envoy is a cloud-native high-performance edge/middle/service proxy. When additional address are not ip addresses, then the Happy Eyeballs sorting alg…

Fix: 1.30.8 / 1.31.4+
Fix from $1,950 2024-12-18