Filter
Versions
1.29.0
16
1.19.0
14
1.28.0
12
1.24.0
11
1.25.0
11
1.30.0
11
1.23.0
10
1.26.0
10
1.18.0
9
1.17.0
8
1.13.0
7
1.20.0
7
1.21.0
6
1.27.0
6
1.16.0
5
1.31.0
5
1.12.4
4
1.13.2
4
1.14.2
4
1.12.1
3
1.14.0
3
1.16.2
3
1.17.1
3
1.9.0
3
1.0
2
1.1
2
1.10
2
1.11
2
1.11.1
2
1.12
2
1.13
2
1.14
2
1.14.6
2
1.15
2
1.15.3
2
1.16
2
1.17
2
1.18
2
1.19
2
1.2
2
1.20
2
1.21
2
1.22
2
1.23
2
1.24
2
1.25
2
1.26
2
1.27
2
1.28
2
1.29
2
1.3
2
1.30
2
1.31
2
1.32
2
1.4
2
1.5
2
1.6
2
1.7
2
1.7.0
2
1.8
2
1.9
2
1.0.0
1
1.1.0
1
1.10.0
1
1.11.0
1
1.11.2
1
1.12.0
1
1.14.1
1
1.15.0
1
1.16.4
1
1.2.0
1
1.24.10
1
1.25.9
1
1.26.4
1
1.3.0
1
1.33
1
1.4.0
1
1.5.0
1
1.6.0
1
1.7.1
1
1.8.0
1
1.9.1
1
2d69e30
1
Apache Tomcat- Rapid Reset HTTP/2 vulnerability
First published (updated )
Envoy ProxyEnvoy gRPC client produces invalid protobuf when an HTTP header with non-UTF8 value is received.
9.8
First published (updated )
Envoy ProxyEnvoy client may fake the header `x-envoy-original-path`
9.1
First published (updated )
Envoy ProxyEnvoy forwards invalid Http2/Http3 downstream headers
9.1
First published (updated )
Envoy ProxyEnvoy may crash when a large request body is processed in Lua filter
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoy ProxyEnvoy doesn't escape HTTP header values
9.1
First published (updated )
Envoy ProxyEnvoy may crash when a redirect url without a state param is received in the oauth filter
7.5
First published (updated )
Envoy ProxyHTTP/1: sending overload crashes when the request is reset beforehand in envoy
7.5
First published (updated )
Envoy ProxyEnvoy Admin Interface Exposed through prometheus metrics endpoint
7.1
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoy Proxy 1.33End of life
First published (updated )
Envoy ProxyHTTP/1.1 multiple issues with envoy.reloadable_features.http1_balsa_delay_reset in envoy
7.1
First published (updated )
Envoy ProxyHappy Eyeballs: Validate that additional_address are IP addresses instead of crashing when sorting in envoy
4.5
First published (updated )
Envoy Proxy 1.31End of life
First published (updated )
Envoy Proxy 1.31End of life
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoy Proxy 1.30End of life
First published (updated )
Envoy Proxy 1.30End of life
First published (updated )
Envoy Proxy 1.29Reached end of life
First published (updated )
Envoy Proxy 1.29Reached end of life
First published (updated )
Envoy ProxyWhen parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero characters…
8.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
go/github.com/envoyproxy/envoyEnvoy 1.9.0 and before does not normalize HTTP URL paths. A remote attacker may craft a relative pat…
10
First published (updated )
redhat/envoyEnvoy vulnerable to HTTP/2 memory leak in nghttp2 codec
7.5
First published (updated )
Envoy Proxy 1.32End of life
First published (updated )
Envoy Proxy 1.32End of life
First published (updated )
Envoy ProxyEnvoy vulnerable to CORS filter segfault when origin header is removed
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/envoyEnvoy's gRPC access log crash caused by the listener draining
6.5
First published (updated )
redhat/envoyEnvoy vulnerable to OAuth2 credentials exploit with permanent validity
9.8
First published (updated )
redhat/envoyEnvoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes
8.2
First published (updated )
Envoy ProxyPotential manipulate `x-envoy` headers from external sources in envoy
6.5
First published (updated )
Envoy ProxyEnvoy incorrectly accepts HTTP 200 response for entering upgrade mode
8.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.