envoyproxy Vulnerability Advisory Catalog

Total 112 security vulnerabilities recorded for envoyproxy software and firmware.

← Back to All Vendors
Component: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, the HTTP OAuth2 filter (en...

📅 2026-06-26
CVSS 5.9 Dossier →
Component: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.37.0 until 1.37.5 and 1.38.3, when the %REQUESTED_SERVER...

📅 2026-06-26
CVSS 7.5 Dossier →
Component: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.36.0 until 1.36.9, 1.37.5, and 1.38.3, a Use-After-Free ...

📅 2026-06-26
CVSS 5.9 Dossier →
Component: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, Envoy can transla...

📅 2026-06-26
CVSS 7.5 Dossier →
Component: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, a vulner...

📅 2026-06-26
CVSS 5.9 Dossier →
Component: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, in cases where UD...

📅 2026-06-26
CVSS 5.9 Dossier →
Component: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.23.0 until 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a vulne...

📅 2026-06-26
CVSS 7.5 Dossier →
Component: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, destructor of JSO...

📅 2026-06-26
CVSS 7.5 Dossier →
Component: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a structural flaw...

📅 2026-06-26
CVSS 4.4 Dossier →
Component: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, the OAuth2 HTTP f...

📅 2026-06-26
CVSS 6.8 Dossier →
Component: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, PROXY Pr...

📅 2026-06-26
CVSS 4.8 Dossier →
Component: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.18.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the rout...

📅 2026-06-26
CVSS 5.9 Dossier →
Component: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, Envoy cr...

📅 2026-06-26
CVSS 6.5 Dossier →
Component: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.26.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, the envo...

📅 2026-06-26
CVSS 6.5 Dossier →
Component: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a vulner...

📅 2026-06-17
CVSS 7.5 Dossier →
Component: envoy

Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, At the rate limit filter, if the response phase l...

📅 2026-03-10
CVSS 5.3 Dossier →
Component: envoy

Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, a logic vulnerability in Envoy's HTTP connection ...

📅 2026-03-10
CVSS 5.9 Dossier →
Component: envoy

Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, calling Utility::getAddressWithPort with a scoped...

📅 2026-03-10
CVSS 5.9 Dossier →
Component: envoy

Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, an off-by-one write in Envoy::JsonEscaper::escape...

📅 2026-03-10
CVSS 5.3 Dossier →
Component: envoy

Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, the Envoy RBAC (Role-Based Access Control) filter...

📅 2026-03-10
CVSS 7.5 Dossier →
Component: gateway

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, En...

📅 2026-01-12
CVSS 8.8 Dossier →
Component: envoy

Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, Envoy’s mTLS certificate matcher for match_ty...

📅 2025-12-03
CVSS 5.0 Dossier →
Component: envoy

Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, when Envoy is configured in TCP proxy mode to...

📅 2025-12-03
CVSS 3.7 Dossier →
Component: envoy

Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, Envoy crashes when JWT authentication is conf...

📅 2025-12-03
CVSS 6.5 Dossier →
Page 1 of 5 (112 Total Records)