EN
Product
envoy
On CISA KEVExploited in the wild
127
CVEs
2
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 12High 83Medium 31Low 1
Watch
Add envoy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-23322 | 7.5 | Feb 9 | Envoy is a high-performance edge/middle/service proxy Affected: 1.26.0 before 1.26.7; 1.27.0 before 1.27.3; 1.28.0 before 1.28.1; 1.29.0 before 1.29.1 |
| CVE-2023-35943 | 7.5 | Jul 25 | Envoy is an open source edge and service proxy designed for cloud-native applications Affected: 1.23.0 before 1.23.12; 1.24.0 before 1.24.10; 1.25.0 before 1.25.9; 1.26.0 before 1.26.4 |
| CVE-2023-35945 | 7.5 | Jul 13 | Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec Affected: >= 1.26.0, < 1.26.3; >= 1.25.0, < 1.25.8; >= 1.24.0, < 1.24.9; >= 1.23.0, < 1.23.11 |
| CVE-2023-27496 | 7.5 | Apr 4 | Envoy is an open source edge and service proxy designed for cloud-native applications Affected: before 1.22.9; 1.23.0 before 1.23.6; 1.24.0 before 1.24.4; 1.25.0 before 1.25.3 |
| CVE-2022-29228 | 7.5 | Jun 9 | Envoy is a cloud-native high-performance proxy Affected: before 1.22.1 |
| CVE-2022-29227 | 7.5 | Jun 9 | Envoy is a cloud-native high-performance edge/middle/service proxy Affected: before 1.22.1 |
| CVE-2022-29225 | 7.5 | Jun 9 | Envoy is a cloud-native high-performance proxy Affected: before 1.22.1 |
| CVE-2022-21655 | 7.5 | Feb 22 | Envoy is an open source edge and service proxy, designed for cloud-native applications Affected: before 1.18.6; 1.19.0 before 1.19.3; 1.20.0 before 1.20.2; 1.21.0 before 1.21.1 |
| CVE-2021-43826 | 7.5 | Feb 22 | Envoy is an open source edge and service proxy, designed for cloud-native applications Affected: before 1.18.6; 1.19.0 before 1.19.3; 1.20.0 before 1.20.2; 1.21.0 before 1.21.1 |
| CVE-2021-43825 | 7.5 | Feb 22 | Envoy is an open source edge and service proxy, designed for cloud-native applications Affected: before 1.18.6; 1.19.0 before 1.19.3; 1.20.0 before 1.20.2; 1.21.0 before 1.21.1 |
| CVE-2021-43824 | 7.5 | Feb 22 | Envoy is an open source edge and service proxy, designed for cloud-native applications Affected: before 1.18.6; 1.19.0 before 1.19.3; 1.20.0 before 1.20.2; 1.21.0 before 1.21.1 |
| CVE-2021-39204 | 7.5 | Sep 9 | Pomerium is an open source identity-aware access proxy Affected: through 1.16.4; 1.17.0 before 1.17.4; 1.18.0 before 1.18.4; 1.19.0 |
| CVE-2021-32781 | 7.5 | Aug 24 | Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures Affected: 1.16.0 before 1.16.5; 1.17.0 before 1.17.4; 1.18.0 before 1.18.4; 1.19.0 |
| CVE-2021-32780 | 7.5 | Aug 24 | Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures Affected: 1.18.0 before 1.18.4; 1.19.0 |
| CVE-2021-32778 | 7.5 | Aug 24 | Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures Affected: 1.16.0 before 1.16.5; 1.17.0 before 1.17.4; 1.18.0 before 1.18.4; 1.19.0 |
| CVE-2021-29258 | 7.5 | May 20 | An issue was discovered in Envoy 1.14.0 Affected: 1.14.6; 1.15.3; 1.16.2; 1.17.1 |
| CVE-2021-28683 | 7.5 | May 20 | An issue was discovered in Envoy through 1.71.1 Affected: 1.16.2; 1.17.1 |
| CVE-2021-28682 | 7.5 | May 20 | An issue was discovered in Envoy through 1.71.1 Affected: 1.14.6; 1.15.3; 1.16.2; 1.17.1 |
| CVE-2020-35471 | 7.5 | Dec 15 | Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500 Affected: before 1.16.1 |
| CVE-2020-25018 | 7.5 | Oct 1 | Envoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicalization Affected: 2d69e30 before 3b5acb2 |
| CVE-2020-8663 | 7.5 | Jul 1 | Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may exhaust file descriptors and/or memory when accepting too many connections Affected: through 1.12.4; 1.13.0 through 1.13.2; 1.14.0 through 1.14.2 |
| CVE-2020-12605 | 7.5 | Jul 1 | Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when processing HTTP/1.1 headers with long field names or requests with long URLs Affected: through 1.12.4; 1.13.2; 1.14.2 |
| CVE-2020-12604 | 7.5 | Jul 1 | Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case where an HTTP/2 client requests a large payload but does not send enough… Affected: through 1.12.4; 1.13.2; 1.14.2 |
| CVE-2020-12603 | 7.5 | Jul 1 | Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when proxying HTTP/2 requests or responses with many small (i.e Affected: through 1.12.4; 1.13.2; 1.14.2 |
| CVE-2020-8661 | 7.5 | Mar 4 | CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests Affected: through 1.13.0 |
| CVE-2020-8659 | 7.5 | Mar 4 | CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small (i.e Affected: through 1.13.0 |
| CVE-2019-18838 | 7.5 | Dec 13 | An issue was discovered in Envoy 1.12.0 Affected: through 1.12.1 |
| CVE-2019-18836 | 7.5 | Nov 11 | Envoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a single idle TCP connection being able to keep a worker thread in an infinite busy… Affected: 1.12.0 |
| CVE-2019-15226 | 7.5 | Oct 9 | Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the total size of the headers stays below a maximum limit Affected: 1.0.0; 1.1.0; 1.2.0; 1.3.0; 1.4.0; 1.5.0; +10 more |
| CVE-2019-15225 | 7.5 | Aug 19 | In Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc++ regular expression implementation Affected: through 1.11.1 |
| CVE-2026-73546 | 7.4 | Sep 21 | Envoy: Stored XSS in Admin Stats Interface (/stats?format=html) Affected: < 1.36.10; >= 1.37.0, < 1.37.6; >= 1.38.0, < 1.38.4; >= 1.39.0, < 1.39.1 |
| CVE-2025-66220 | 7.1 | Dec 3 | Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte Affected: >= 1.36.0, <= 1.36.2; >= 1.35.0, <= 1.35.6; >= 1.34.0, <= 1.34.10; <= 1.33.12 |
| CVE-2024-53271 | 7.1 | Dec 18 | HTTP/1.1 multiple issues with envoy.reloadable_features.http1_balsa_delay_reset in envoy Affected: >= 1.31.0, < 1.31.5; >= 1.32.0, < 1.32.3 |