envoy-gateway vulnerabilities (Bitnami)
10 vulnerabilities.
-
envoy-gatewayBitnami Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode 7.4 High -
envoy-gatewayBitnami Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure 9.1 Critical -
envoy-gatewayBitnami Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock 5.3 Medium -
envoy-gatewayBitnami Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header 6.5 Medium -
envoy-gatewayBitnami Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization 6.5 Medium -
envoy-gatewayBitnami Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit 6.5 Medium -
envoy-gatewayBitnami Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass 6.4 Medium -
envoy-gatewayBitnami Envoy Extension Policy lua scripts injection causes arbitrary command execution 8.8 High -
envoy-gatewayBitnami Envoy Gateway Log Injection Vulnerability 5.3 Medium -
envoy-gatewayBitnami Envoy Admin Interface Exposed through prometheus metrics endpoint 7.1 High