Skip to content
OpenAdvisories

Package · Go

github.com/envoyproxy/gateway

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.4
    CVE-2026-53714

    Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, the xDS gRPC server in GatewayNamespaceMode, configured through provider.kubernetes.deploy.type=GatewayNamespac…

    envoyproxy gateway github.com/envoyproxy/gateway Go
  • High 8.8
    CVE-2026-22771

    Envoy Extension Policy lua scripts injection causes arbitrary command execution

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy's credentials. These cre…

    envoyproxy gateway github.com/envoyproxy/gateway Go
  • High 7.1
    CVE-2025-24030

    Envoy Admin Interface Exposed through prometheus metrics endpoint

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. A user with access to the Kubernetes cluster can use a path traversal attack to execute Envoy Admin interface commands on proxies managed…

    envoyproxy gateway github.com/envoyproxy/gateway Go