EN
Product
envoy
by envoyproxy · last CVE Oct 22, 2026
On CISA KEVExploited in the wild
127
CVEs
2
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 12High 83Medium 31Low 1
Watch

Add envoy to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-111497
In wildKEVNew
9.8
55%
Oct 22
Out-of-Bounds Write in Google Brotli Decoder
Affected: before 1.37.8; 1.38.0 before 1.38.6; 1.39.0 before 1.39.3
CVE-2023-44487
In wildKEV
7.5
100%
Oct 10
HTTP/2 Rapid Reset Attack Vulnerability
Affected: 1.24.10; 1.25.9; 1.26.4; 1.27.0
Showing 2