Skip to content
OpenAdvisories

Package · Go

github.com/envoyproxy/envoy

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-26308

    Envoy has an RBAC Header Validation Bypass via Multi-Value Header Concatenation

    Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, the Envoy RBAC (Role-Based Access Control) filter contains a logic vulnerability in how it validates HTTP headers when multiple values are present for the sam…

    envoyproxy envoy github.com/envoyproxy/envoy Go
  • High 7.5
    CVE-2025-54588

    Envoy: Race condition in Dynamic Forward Proxy leads to use-after-free and segmentation faults

    Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. Versions 1.34.0 through 1.34.4 and 1.35.0 contain a use-after-free (UAF) vulnerability in the DNS cache, causing abnormal process termination. The…

    envoyproxy envoy github.com/envoyproxy/envoy Go