envoyproxy/envoy Security Advisories | GitStock

medium2026-03-10

Envoy's global rate limit may crash when the response phase limit is enabled and the response phase request is failed directly

GHSA-c23c-rp3m-vpg3 · CVE-2026-26330

medium2026-03-10

Envoy: HTTP - filter chain execution on reset streams causing UAF crash

GHSA-84xm-r438-86px · CVE-2026-26311

medium2026-03-10

Envoy affected by off-by-one write in JsonEscaper::escapeString()

GHSA-56cj-wgg3-x943 · CVE-2026-26309

high2026-03-10

Envoy has RBAC Header Validation Bypass via Multi-Value Header Concatenation

GHSA-ghc4-35x6-crw5 · CVE-2026-26308

medium2026-03-10

Envoy vulnerable to crash for scoped ip address during DNS

GHSA-3cw6-2j68-868p · CVE-2026-26310

medium2025-12-05

Envoy's TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte

GHSA-rwjg-c3h2-f57p · CVE-2025-66220

low2025-12-05

Envoy forwards early CONNECT data in TCP proxy mode

GHSA-rj35-4m94-77jh · CVE-2025-64763

medium2025-12-05

Envoy crashes when JWT authentication is configured with the remote JWKS fetching

GHSA-mp85-7mrq-r866 · CVE-2025-64527

high2025-09-15

Envoy: Race condition in Dynamic Forward Proxy leads to use-after-free and segmentation faults

GHSA-g9vw-6pvx-7gmw · CVE-2025-54588

medium2025-03-21

Envoy crashes when HTTP ext_proc processes local replies

GHSA-cf3q-gqg7-3fm9 · CVE-2025-30157

critical2022-05-24

EnvoyProxy Envoy Missing HTTP URL path normalization

GHSA-2wmf-p7f8-w42h · CVE-2019-9901