github.com/envoyproxy/gateway vulnerabilities (Go)
10 vulnerabilities.
-
github.com/envoyproxy/gatewayGo Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode 7.4 High -
github.com/envoyproxy/gatewayGo Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure 9.1 Critical -
github.com/envoyproxy/gatewayGo Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock 5.3 Medium -
github.com/envoyproxy/gatewayGo Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header 6.5 Medium -
github.com/envoyproxy/gatewayGo Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization 6.5 Medium -
github.com/envoyproxy/gatewayGo Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit 6.5 Medium -
github.com/envoyproxy/gatewayGo Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass 6.4 Medium -
github.com/envoyproxy/gatewayGo Envoy Extension Policy lua scripts injection causes arbitrary command execution 8.8 High -
github.com/envoyproxy/gatewayGo Envoy Gateway Log Injection Vulnerability 5.3 Medium -
github.com/envoyproxy/gatewayGo Envoy Admin Interface Exposed through prometheus metrics endpoint 7.1 High