Skip to contentEnvoyproxy Envoy vulnerabilities
- envoyproxy envoyBypass of path matching rules using escaped slash charactersCVE-2021-29492Fix availableEPSS 63.1%8.1 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security updateCVE-2021-29258Fix available7.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security updateCVE-2021-28683Fix available7.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security updateCVE-2021-28682Fix available7.5 High
- envoyproxy envoyJWT authentication bypass with unknown issuer tokenCVE-2021-21378Fix available8.2 High
- envoyproxy envoyEnvoy before 1.16.1 logs an incorrect downstream address because it considers only the directly...CVE-2020-35470Fix available8.8 High
- envoyproxy envoyEnvoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation...CVE-2020-35471Fix available7.5 High
- envoyproxy envoyEnvoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicalization.CVE-2020-250187.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security updateCVE-2020-25017Fix available8.3 High
- envoyproxy envoyTLS Validation Vulnerability in EnvoyCVE-2020-15104Fix available4.6 Medium
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security updateCVE-2020-12605Fix available7.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security updateCVE-2020-12604Fix available7.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security updateCVE-2020-8663Fix available7.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security updateCVE-2020-12603Fix available7.5 High
- envoyproxy envoy, istio +1 moreIstio through 1.5.1 and Envoy through 1.14.1 have a data-leak issue. If there is a TCP connection...CVE-2020-11767Fix available3.1 Low
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security updateCVE-2020-8660Fix available5.3 Medium
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security updateCVE-2020-86645.3 Medium
- envoyproxy envoy, redhat openshift service mesh +1 moreRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security updateCVE-2020-86617.5 High
- envoyproxy envoy, redhat openshift service mesh, debian linux +2 moreRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security updateCVE-2020-86597.5 High
- envoyproxy envoyAn issue was discovered in Envoy 1.12.0. Upon receipt of a malformed HTTP request without a Host...CVE-2019-188387.5 High
- envoyproxy envoyAn issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such...CVE-2019-18802Fix available9.8 Critical
- envoyproxy envoyAn issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that...CVE-2019-188019.8 Critical
- envoyproxy envoy, istio +1 moreEnvoy before 1.12.1 allows a remote denial of service because of resource loops, as demonstrated...CVE-2019-188367.5 High
- envoyproxy envoyUpon receiving each incoming request header data, Envoy will iterate over existing request...CVE-2019-15226EPSS 64.5%7.5 High
- envoyproxy envoyIn Envoy through 1.11.1, users may configure a route to match incoming path headers via the...CVE-2019-152257.5 High
- envoyproxy envoyEnvoyProxy Envoy Missing HTTP URL path normalizationCVE-2019-9901Fix available6.5 Medium
- envoyproxy envoy, redhat openshift service mesh +1 moreWhen parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero...CVE-2019-99006.5 Medium