—
GO-2026-6011
Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway
Quick fix
GO-2026-6011 — github.com/envoyproxy/gateway: upgrade to the fixed version with the command below.
go get github.com/envoyproxy/gateway@v1.7.4Details
Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/envoyproxy/gateway
Introduced in:
0 Fixed in: 1.7.4 Fix
go get github.com/envoyproxy/gateway@v1.7.4