Login Request a demo
EN
Product
envoy
by envoyproxy · last CVE Oct 22, 2026
On CISA KEVExploited in the wild
127
CVEs
2
On KEV
10.0
Max CVSS
1
New 30D
Vulnerabilities127In the news7Timeline
Severity mix
Critical 12High 83Medium 31Low 1
Severity
All severities127Critical12High83Medium31Low1
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add envoy to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-45809
7.5
0%
Sep 20
Envoy is a cloud-native high-performance edge/middle/service proxy
Affected: 1.29.0 before 1.29.9; 1.30.0 before 1.30.6; 1.31.0 before 1.31.2
CVE-2024-45807
7.5
0%
Sep 20
Envoy is a cloud-native high-performance edge/middle/service proxy
Affected: 1.31.0 before 1.31.2
CVE-2024-34363
7.5
1%
Jun 4
Envoy is a cloud-native, open source edge and service proxy
Affected: 1.28.0 before 1.28.4; 1.29.0 before 1.29.5; 1.30.0 before 1.30.2
CVE-2024-32976
7.5
1%
Jun 4
Envoy is a cloud-native, open source edge and service proxy
Affected: 1.18.0 before 1.27.6; 1.28.0 before 1.28.4; 1.29.0 before 1.29.5; 1.30.0 before 1.30.2
CVE-2024-32975
7.5
1%
Jun 4
Envoy is a cloud-native, open source edge and service proxy
Affected: before 1.27.6; 1.28.0 before 1.28.4; 1.29.0 before 1.29.5; 1.30.0 before 1.30.2
CVE-2024-32974
7.5
1%
Jun 4
Envoy is a cloud-native, open source edge and service proxy
Affected: before 1.27.6; 1.28.0 before 1.28.4; 1.29.0 before 1.29.5; 1.30.0 before 1.30.2
CVE-2024-32475
7.5
1%
Apr 18
Envoy is a cloud-native, open source edge and service proxy
Affected: 1.13.0 before 1.27.5; 1.28.0 before 1.28.3; 1.29.0 before 1.29.4; 1.30.0
CVE-2024-30255
7.5
88%
Apr 4
Envoy is a cloud-native, open source edge and service proxy
Affected: before 1.26.8; 1.27.0 before 1.27.4; 1.28.0 before 1.28.2; 1.29.0 before 1.29.3
CVE-2024-27919
7.5
87%
Apr 4
Envoy is a cloud-native, open-source edge and service proxy
Affected: 1.29.0; 1.29.1
CVE-2024-23327
7.5
1%
Feb 9
Envoy is a high-performance edge/middle/service proxy
Affected: 1.26.0 before 1.26.7; 1.27.0 before 1.27.3; 1.28.0 before 1.28.1; 1.29.0 before 1.29.1
CVE-2024-23325
7.5
1%
Feb 9
Envoy is a high-performance edge/middle/service proxy
Affected: 1.26.0 before 1.26.7; 1.27.0 before 1.27.3; 1.28.0 before 1.28.1; 1.29.0 before 1.29.1
CVE-2024-23324
7.5
1%
Feb 9
Envoy is a high-performance edge/middle/service proxy
Affected: 1.26.0 before 1.26.7; 1.27.0 before 1.27.3; 1.28.0 before 1.28.1; 1.29.0 before 1.29.1
CVE-2024-23322
7.5
1%
Feb 9
Envoy is a high-performance edge/middle/service proxy
Affected: 1.26.0 before 1.26.7; 1.27.0 before 1.27.3; 1.28.0 before 1.28.1; 1.29.0 before 1.29.1
CVE-2023-35943
7.5
1%
Jul 25
Envoy is an open source edge and service proxy designed for cloud-native applications
Affected: 1.23.0 before 1.23.12; 1.24.0 before 1.24.10; 1.25.0 before 1.25.9; 1.26.0 before 1.26.4
CVE-2023-35945
7.5
2%
Jul 13
Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec
Affected: >= 1.26.0, < 1.26.3; >= 1.25.0, < 1.25.8; >= 1.24.0, < 1.24.9; >= 1.23.0, < 1.23.11
CVE-2023-27496
7.5
1%
Apr 4
Envoy is an open source edge and service proxy designed for cloud-native applications
Affected: before 1.22.9; 1.23.0 before 1.23.6; 1.24.0 before 1.24.4; 1.25.0 before 1.25.3
CVE-2022-29228
7.5
1%
Jun 9
Envoy is a cloud-native high-performance proxy
Affected: before 1.22.1
CVE-2022-29227
7.5
1%
Jun 9
Envoy is a cloud-native high-performance edge/middle/service proxy
Affected: before 1.22.1
CVE-2022-29225
7.5
2%
Jun 9
Envoy is a cloud-native high-performance proxy
Affected: before 1.22.1
CVE-2022-21655
7.5
1%
Feb 22
Envoy is an open source edge and service proxy, designed for cloud-native applications
Affected: before 1.18.6; 1.19.0 before 1.19.3; 1.20.0 before 1.20.2; 1.21.0 before 1.21.1
CVE-2021-43826
7.5
1%
Feb 22
Envoy is an open source edge and service proxy, designed for cloud-native applications
Affected: before 1.18.6; 1.19.0 before 1.19.3; 1.20.0 before 1.20.2; 1.21.0 before 1.21.1
CVE-2021-43825
7.5
1%
Feb 22
Envoy is an open source edge and service proxy, designed for cloud-native applications
Affected: before 1.18.6; 1.19.0 before 1.19.3; 1.20.0 before 1.20.2; 1.21.0 before 1.21.1
CVE-2021-43824
7.5
1%
Feb 22
Envoy is an open source edge and service proxy, designed for cloud-native applications
Affected: before 1.18.6; 1.19.0 before 1.19.3; 1.20.0 before 1.20.2; 1.21.0 before 1.21.1
CVE-2021-39204
7.5
2%
Sep 9
Pomerium is an open source identity-aware access proxy
Affected: through 1.16.4; 1.17.0 before 1.17.4; 1.18.0 before 1.18.4; 1.19.0
CVE-2021-32781
7.5
1%
Aug 24
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures
Affected: 1.16.0 before 1.16.5; 1.17.0 before 1.17.4; 1.18.0 before 1.18.4; 1.19.0
CVE-2021-32780
7.5
1%
Aug 24
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures
Affected: 1.18.0 before 1.18.4; 1.19.0
CVE-2021-32778
7.5
1%
Aug 24
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures
Affected: 1.16.0 before 1.16.5; 1.17.0 before 1.17.4; 1.18.0 before 1.18.4; 1.19.0
CVE-2021-29258
7.5
2%
May 20
An issue was discovered in Envoy 1.14.0
Affected: 1.14.6; 1.15.3; 1.16.2; 1.17.1
CVE-2021-28683
7.5
2%
May 20
An issue was discovered in Envoy through 1.71.1
Affected: 1.16.2; 1.17.1
CVE-2021-28682
7.5
2%
May 20
An issue was discovered in Envoy through 1.71.1
Affected: 1.14.6; 1.15.3; 1.16.2; 1.17.1
CVE-2020-35471
7.5
2%
Dec 15
Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500
Affected: before 1.16.1
CVE-2020-25018
7.5
1%
Oct 1
Envoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicalization
Affected: 2d69e30 before 3b5acb2
CVE-2020-8663
7.5
1%
Jul 1
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may exhaust file descriptors and/or memory when accepting too many connections
Affected: through 1.12.4; 1.13.0 through 1.13.2; 1.14.0 through 1.14.2
CVE-2020-12605
7.5
1%
Jul 1
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when processing HTTP/1.1 headers with long field names or requests with long URLs
Affected: through 1.12.4; 1.13.2; 1.14.2
CVE-2020-12604
7.5
2%
Jul 1
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case where an HTTP/2 client requests a large payload but does not send enough…
Affected: through 1.12.4; 1.13.2; 1.14.2
CVE-2020-12603
7.5
1%
Jul 1
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when proxying HTTP/2 requests or responses with many small (i.e
Affected: through 1.12.4; 1.13.2; 1.14.2
CVE-2020-8661
7.5
2%
Mar 4
CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests
Affected: through 1.13.0
CVE-2020-8659
7.5
2%
Mar 4
CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small (i.e
Affected: through 1.13.0
CVE-2019-18838
7.5
2%
Dec 13
An issue was discovered in Envoy 1.12.0
Affected: through 1.12.1
CVE-2019-18836
7.5
2%
Nov 11
Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy…
Affected: 1.12.0
CVE-2019-15226
7.5
65%
Oct 9
Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the total size of the headers stays below a maximum limit
Affected: 1.0.0; 1.1.0; 1.2.0; 1.3.0; 1.4.0; 1.5.0; +10 more
CVE-2019-15225
7.5
3%
Aug 19
In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation
Affected: through 1.11.1
CVE-2026-73546
7.4
1%
Sep 21
Envoy: Stored XSS in Admin Stats Interface (/stats?format=html)
Affected: < 1.36.10; >= 1.37.0, < 1.37.6; >= 1.38.0, < 1.38.4; >= 1.39.0, < 1.39.1
CVE-2025-66220
7.1
0%
Dec 3
Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte
Affected: >= 1.36.0, <= 1.36.2; >= 1.35.0, <= 1.35.6; >= 1.34.0, <= 1.34.10; <= 1.33.12
CVE-2024-53271
7.1
1%
Dec 18
HTTP/1.1 multiple issues with envoy.reloadable_features.http1_balsa_delay_reset in envoy
Affected: >= 1.31.0, < 1.31.5; >= 1.32.0, < 1.32.3
CVE-2026-47775
6.8
0%
Jun 26
Envoy OAuth2 Filter: Padding Oracle via AES-256-CBC Cookie Decryption
Affected: >= 1.38.0, < 1.38.1; >= 1.37.0, < 1.37.3; >= 1.36.0, < 1.36.7; < 1.35.11
CVE-2026-47207
6.5
0%
Jun 26
Envoy crashes if multiple unexpected ext_proc responses are packed into one gRPC message
Affected: >= 1.38.0, < 1.38.3; >= 1.37.0, < 1.37.5; >= 1.36.0, < 1.36.9; >= 1.34.0, < 1.35.13
CVE-2025-64527
6.5
1%
Dec 3
Envoy crashes when JWT authentication is configured with the remote JWKS fetching
Affected: >= 1.36.0, <= 1.36.2; >= 1.35.0, <= 1.35.6; >= 1.34.0, <= 1.34.10; <= 1.33.12
CVE-2024-45808
6.5
0%
Sep 20
Envoy is a cloud-native high-performance edge/middle/service proxy
Affected: before 1.28.7; 1.29.0 before 1.29.9; 1.30.0 before 1.30.6; 1.31.0 before 1.31.2
CVE-2024-45806
6.5
0%
Sep 20
Envoy is a cloud-native high-performance edge/middle/service proxy
Affected: before 1.28.7; 1.29.0 before 1.29.9; 1.30.0 before 1.30.6; 1.31.0 before 1.31.2
Page 2 of 3 · 127 total
123