envoyproxy gateway vulnerabilities

CVEs per yearBy the year they were published

1. 20252
2. 20268

Newest CVEs

• CVE-2026-53714

  Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode

  envoyproxy · gateway

  High7.4
• CVE-2026-53716

  Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit

  envoyproxy · gateway

  Medium6.5
• CVE-2026-53715

  Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock

  envoyproxy · gateway

  Medium5.3
• CVE-2026-53719

  Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

  envoyproxy · gateway

  Medium6.5
• CVE-2026-53718

  Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass

  envoyproxy · gateway

  Medium6.4
• CVE-2026-53713

  Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure

  envoyproxy · gateway

  Critical9.1
• CVE-2026-53717

  Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header

  envoyproxy · gateway

  Medium6.5
• CVE-2026-22771

  Envoy Extension Policy lua scripts injection causes arbitrary command execution

  envoyproxy · gateway

  High8.8
• CVE-2025-25294

  Envoy Gateway Log Injection Vulnerability

  envoyproxy · gateway

  Medium5.3
• CVE-2025-24030

  Envoy Admin Interface Exposed through prometheus metrics endpoint

  envoyproxy · gateway

  High7.1