Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-c23c-rp3m-vpg3
  • Go/github.com/envoyproxy/envoy
 Envoy's global rate limit may crash when the response phase limit is enabled and the response phase request is failed directly 10 Mar
  • No fix available
  • Severity - 5.3 (Medium)
GHSA-84xm-r438-86px
  • Go/github.com/envoyproxy/envoy
 Envoy: HTTP - filter chain execution on reset streams causing UAF crash 10 Mar
  • No fix available
  • Severity - 5.9 (Medium)
GHSA-56cj-wgg3-x943
  • Go/github.com/envoyproxy/envoy
 Envoy affected by off-by-one write in JsonEscaper::escapeString() 10 Mar
  • No fix available
  • Severity - 5.3 (Medium)
GHSA-ghc4-35x6-crw5
  • Go/github.com/envoyproxy/envoy
 Envoy has RBAC Header Validation Bypass via Multi-Value Header Concatenation 10 Mar
  • Fix available
  • Severity - 7.5 (High)
GHSA-3cw6-2j68-868p
  • Go/github.com/envoyproxy/envoy
 Envoy vulnerable to crash for scoped ip address during DNS 10 Mar
  • No fix available
  • Severity - 5.9 (Medium)
GHSA-rwjg-c3h2-f57p
  • Go/github.com/envoyproxy/envoy
 Envoy's TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte 05 Dec 2025
  • Fix available
  • Severity - 5.0 (Medium)
GHSA-rj35-4m94-77jh
  • Go/github.com/envoyproxy/envoy
 Envoy forwards early CONNECT data in TCP proxy mode 05 Dec 2025
  • Fix available
  • Severity - 3.7 (Low)
GHSA-mp85-7mrq-r866
  • Go/github.com/envoyproxy/envoy
 Envoy crashes when JWT authentication is configured with the remote JWKS fetching 05 Dec 2025
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-g9vw-6pvx-7gmw
  • Go/github.com/envoyproxy/envoy
 Envoy: Race condition in Dynamic Forward Proxy leads to use-after-free and segmentation faults 15 Sep 2025
  • Fix available
  • Severity - 7.5 (High)
GHSA-cf3q-gqg7-3fm9
  • Go/github.com/envoyproxy/envoy
 Envoy crashes when HTTP ext_proc processes local replies 21 Mar 2025
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-2wmf-p7f8-w42h
  • Go/github.com/envoyproxy/envoy
 EnvoyProxy Envoy Missing HTTP URL path normalization 24 May 2022
  • Fix available
  • Severity - 10.0 (Critical)