Envoyproxy

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 138
    Known Exploited: 0
    5
    Critical Level Threats
    71
    High Level Threats
    60
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-111497

    Out-of-Bounds Write in Google Brotli Decoder

    Last Modified: Nov 03, 2026
    Published: Oct 22, 2026

    CVE-2026-53714

    Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode

    Last Modified: Sep 20, 2026
    Published: Sep 14, 2026

    CVE-2026-53716

    Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit

    Last Modified: Sep 16, 2026
    Published: Sep 14, 2026

    CVE-2026-53715

    Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock

    Last Modified: Sep 15, 2026
    Published: Sep 14, 2026

    CVE-2026-53719

    Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

    Last Modified: Sep 16, 2026
    Published: Sep 14, 2026
    Items Per Page
    Envoyproxy Vulnerabilities & Security CVEs | CVE-DB