Skip to content
OpenAdvisories

Package · Go

github.com/envoyproxy/gateway

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-53716

    Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, getFileFromGZ in internal/wasm/httpfetcher.go calls io.ReadAll on a gzip.Reader without limiting decompressed o…

    envoyproxy gateway github.com/envoyproxy/gateway Go
  • Medium 5.3
    CVE-2026-53715

    Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, HTTPServer.ServeHTTP in internal/wasm/httpserver.go reads the plain mappingPath2Cache map without synchronizati…

    envoyproxy gateway github.com/envoyproxy/gateway Go
  • Medium 6.5
    CVE-2026-53719

    Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value…

    envoyproxy gateway github.com/envoyproxy/gateway Go
  • Medium 6.4
    CVE-2026-53718

    Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, an HTTPRoute can use an extension-managed custom backendRef to reference a backend resource in another namespac…

    envoyproxy gateway github.com/envoyproxy/gateway Go
  • Medium 6.5
    CVE-2026-53717

    Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, internal/wasm/imagefetcher.go follows tenant-controlled EnvoyExtensionPolicy spec.wasm[].code.image.url values …

    envoyproxy gateway github.com/envoyproxy/gateway Go
  • Medium 5.3
    CVE-2025-25294

    Envoy Gateway Log Injection Vulnerability

    Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. In all Envoy Gateway versions prior to 1.2.7 and 1.3.1 a default Envoy Proxy access log configuration is used. This format is vulnerable …

    envoyproxy gateway github.com/envoyproxy/gateway Go