—
GO-2026-6008
Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway
Quick fix
GO-2026-6008 — github.com/envoyproxy/gateway: upgrade to the fixed version with the command below.
go get github.com/envoyproxy/gateway@v1.7.4Details
Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/envoyproxy/gateway
Introduced in:
0 Fixed in: 1.7.4 Fix
go get github.com/envoyproxy/gateway@v1.7.4