Go/github.com/envoyproxy/envoy

EnvoyProxy Envoy Missing HTTP URL path normalization

Modified: 9/10/2026

Envoy vulnerable to crash for scoped ip address during DNS

Modified: 3/13/2026

Envoy affected by off-by-one write in JsonEscaper::escapeString()

Modified: 3/13/2026

Envoy: HTTP - filter chain execution on reset streams causing UAF crash

Modified: 3/13/2026

Envoy's global rate limit may crash when the response phase limit is enabled and the response phase request is failed directly

Modified: 3/13/2026

Envoy crashes when HTTP ext_proc processes local replies

Modified: 9/10/2026

Envoy: Race condition in Dynamic Forward Proxy leads to use-after-free and segmentation faults

Modified: 9/15/2025

Envoy has RBAC Header Validation Bypass via Multi-Value Header Concatenation

Modified: 4/13/2026

Envoy crashes when JWT authentication is configured with the remote JWKS fetching

Modified: 12/6/2025

Envoy forwards early CONNECT data in TCP proxy mode

Modified: 12/10/2025

Envoy's TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte

Modified: 12/6/2025