EnvoyProxy Envoy Missing HTTP URL path normalization
Modified: 9/10/2026
package
pkg:go/github.com/envoyproxy/envoy
EnvoyProxy Envoy Missing HTTP URL path normalization
Modified: 9/10/2026
Envoy vulnerable to crash for scoped ip address during DNS
Modified: 3/13/2026
Envoy affected by off-by-one write in JsonEscaper::escapeString()
Modified: 3/13/2026
Envoy: HTTP - filter chain execution on reset streams causing UAF crash
Modified: 3/13/2026
Envoy's global rate limit may crash when the response phase limit is enabled and the response phase request is failed directly
Modified: 3/13/2026
Envoy crashes when HTTP ext_proc processes local replies
Modified: 9/10/2026
Envoy: Race condition in Dynamic Forward Proxy leads to use-after-free and segmentation faults
Modified: 9/15/2025
Envoy has RBAC Header Validation Bypass via Multi-Value Header Concatenation
Modified: 4/13/2026
Envoy crashes when JWT authentication is configured with the remote JWKS fetching
Modified: 12/6/2025
Envoy forwards early CONNECT data in TCP proxy mode
Modified: 12/10/2025
Envoy's TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte
Modified: 12/6/2025