Envoyproxy Gateway vulnerabilities

• envoyproxy gateway Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode CVE-2026-53714 Fix available 7.4 HighJuly 16, 2026
• envoyproxy gateway Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure CVE-2026-53713 Fix available 9.1 CriticalJuly 16, 2026
• envoyproxy gateway Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock CVE-2026-53715 Fix available 5.3 MediumJuly 16, 2026
• envoyproxy gateway Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header CVE-2026-53717 Fix available 6.5 MediumJuly 16, 2026
• envoyproxy gateway Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization CVE-2026-53719 Fix available 6.5 MediumJuly 16, 2026
• envoyproxy gateway Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit CVE-2026-53716 Fix available 6.5 MediumJuly 16, 2026
• envoyproxy gateway Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass CVE-2026-53718 Fix available 6.4 MediumJuly 16, 2026
• envoyproxy gateway, red hat connectivity link 1 +1 more Envoy Extension Policy lua scripts injection causes arbitrary command execution CVE-2026-22771 Fix available 8.8 HighJanuary 12, 2026
• envoyproxy gateway Envoy Gateway Log Injection Vulnerability CVE-2025-25294 Fix available 5.3 MediumMarch 6, 2025
• envoyproxy gateway Envoy Admin Interface Exposed through prometheus metrics endpoint CVE-2025-24030 Fix available 7.1 HighJanuary 23, 2025