Filter
AND
AND
Envoyproxy EnvoyEnvoy vulnerable to OAuth2 credentials exploit with permanent validity
9.8
First published (updated )
Envoyproxy EnvoyEnvoy gRPC client produces invalid protobuf when an HTTP header with non-UTF8 value is received.
9.8
First published (updated )
Envoyproxy EnvoyEnvoy client may fake the header `x-envoy-original-path`
9.1
First published (updated )
Envoyproxy EnvoyEnvoy forwards invalid Http2/Http3 downstream headers
9.1
First published (updated )
Envoyproxy EnvoyEnvoy doesn't escape HTTP header values
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoyproxy EnvoyEnvoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes
8.2
First published (updated )
redhat/envoyEnvoy vulnerable to HTTP/2 memory leak in nghttp2 codec
7.5
First published (updated )
Envoyproxy EnvoyEnvoy vulnerable to CORS filter segfault when origin header is removed
7.5
First published (updated )
Envoyproxy EnvoyEnvoy may crash when a redirect url without a state param is received in the oauth filter
7.5
First published (updated )
Envoyproxy EnvoyEnvoy's gRPC access log crash caused by the listener draining
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoyproxy EnvoyEnvoy may crash when a large request body is processed in Lua filter
6.5
First published (updated )