Filter
Versions
1.29.0
16
1.19.0
14
1.28.0
12
1.24.0
11
1.25.0
11
1.30.0
11
1.23.0
10
1.26.0
10
1.18.0
9
1.17.0
8
1.13.0
7
1.20.0
7
1.21.0
6
1.27.0
6
1.16.0
5
1.31.0
5
1.12.4
4
1.13.2
4
1.14.2
4
1.12.1
3
1.14.0
3
1.16.2
3
1.17.1
3
1.9.0
3
1.0
2
1.1
2
1.10
2
1.11
2
1.11.1
2
1.12
2
1.13
2
1.14
2
1.14.6
2
1.15
2
1.15.3
2
1.16
2
1.17
2
1.18
2
1.19
2
1.2
2
1.20
2
1.21
2
1.22
2
1.23
2
1.24
2
1.25
2
1.26
2
1.27
2
1.28
2
1.29
2
1.3
2
1.30
2
1.31
2
1.32
2
1.4
2
1.5
2
1.6
2
1.7
2
1.7.0
2
1.8
2
1.9
2
1.0.0
1
1.1.0
1
1.10.0
1
1.11.0
1
1.11.2
1
1.12.0
1
1.14.1
1
1.15.0
1
1.16.4
1
1.2.0
1
1.24.10
1
1.25.9
1
1.26.4
1
1.3.0
1
1.33
1
1.4.0
1
1.5.0
1
1.6.0
1
1.7.1
1
1.8.0
1
1.9.1
1
2d69e30
1
redhat/EnvoyTrivial authentication bypass in Envoy
10
First published (updated )
go/github.com/envoyproxy/envoyEnvoy 1.9.0 and before does not normalize HTTP URL paths. A remote attacker may craft a relative pat…
10
First published (updated )
redhat/envoyIncorrect configuration handling allows TLS session re-use without re-validation in Envoy
9.8
First published (updated )
Envoy ProxyMalformed request header may cause route matchers or access controls to be bypassed, resulting in es…
9.8
First published (updated )
Envoy ProxyAn untrusted remote client may send HTTP/2 requests that write to the heap outside of the request bu…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/envoyEnvoy vulnerable to OAuth2 credentials exploit with permanent validity
9.8
First published (updated )
Envoy ProxyEnvoy gRPC client produces invalid protobuf when an HTTP header with non-UTF8 value is received.
9.8
First published (updated )
Envoy ProxyEnvoy client may fake the header `x-envoy-original-path`
9.1
First published (updated )
Envoy ProxyEnvoy forwards invalid Http2/Http3 downstream headers
9.1
First published (updated )
Envoy ProxyEnvoy doesn't escape HTTP header values
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
IBM Cloud Pak for Security (CP4S)Envoy Proxy could provide weaker than expected security, caused by the logging of the incorrect down…
8.8
First published (updated )
Envoy ProxyEnvoy ext auth can be bypassed when Proxy protocol filter sets invalid UTF-8 metadata
8.6
EPSS
0.05%
First published (updated )
Envoy ProxyIncorrect handling of H2 GOAWAY + SETTINGS frames
8.6
First published (updated )
Envoy ProxyIncorrect Authorization with specially crafted requests
8.6
First published (updated )
Envoy ProxyIncorrect concatenation of multiple value request headers in ext-authz extension
8.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoy ProxyIncorrect handling of H/2 GOAWAY followed by SETTINGS frames
8.6
First published (updated )
Envoy ProxyContinued processing of requests after locally generated response
8.6
First published (updated )
Envoy ProxyIncorrectly handling of URI '#fragment' element as part of the path element
8.6
First published (updated )
Envoy ProxyWhen parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero characters…
8.3
First published (updated )
Envoy ProxyBypass of path matching rules using escaped slash characters
8.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoy ProxyEnvoy through 1.15.0 only considers the first value when multiple header values are present for some…
8.3
First published (updated )
Envoy ProxyEnvoy incorrectly accepts HTTP 200 response for entering upgrade mode
8.2
First published (updated )
Envoy ProxyJWT authentication bypass with unknown issuer token
8.2
First published (updated )
redhat/envoyEnvoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes
8.2
First published (updated )
Envoy ProxyUpon receiving each incoming request header data, Envoy will iterate over existing request headers t…
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoy ProxyCrash in proxy protocol when command type of LOCAL in Envoy
7.5
EPSS
0.05%
First published (updated )
Envoy ProxyEnvoy crashes when using an address type that isn’t supported by the OS
7.5
EPSS
0.05%
First published (updated )
Envoy ProxyEnvoy crashes when idle and request per try timeout occur within the backoff interval
7.5
EPSS
0.05%
First published (updated )
Envoy ProxyEnvoy can crash due to uncaught nlohmann JSON exception
7.5
First published (updated )
Envoy ProxyEnvoy can enter an endless loop while decompressing Brotli data with extra input
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.