github.com/envoyproxy/envoy vulnerabilities (Go)
11 vulnerabilities.
-
github.com/envoyproxy/envoyGo Envoy global rate limit may crash when the response phase limit is enabled and the response phase request is failed directly 5.3 Medium -
github.com/envoyproxy/envoyGo Envoy HTTP: filter chain execution on reset streams causing UAF crash 5.9 Medium -
github.com/envoyproxy/envoyGo Envoy has an off-by-one write in JsonEscaper::escapeString() 5.3 Medium -
github.com/envoyproxy/envoyGo Envoy has an RBAC Header Validation Bypass via Multi-Value Header Concatenation 7.5 High -
github.com/envoyproxy/envoyGo Crash for scoped ip address in Envoy during DNS 5.9 Medium -
github.com/envoyproxy/envoyGo Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte 5.0 Medium -
github.com/envoyproxy/envoyGo Envoy forwards early CONNECT data in TCP proxy mode 3.7 Low -
github.com/envoyproxy/envoyGo Envoy crashes when JWT authentication is configured with the remote JWKS fetching 6.5 Medium -
github.com/envoyproxy/envoyGo Envoy: Race condition in Dynamic Forward Proxy leads to use-after-free and segmentation faults 7.5 High -
github.com/envoyproxy/envoyGo Envoy crashes when HTTP ext_proc processes local replies 6.5 Medium -
github.com/envoyproxy/envoyGo EnvoyProxy Envoy Missing HTTP URL path normalization 6.5 Medium