Priority CRITICAL 99KEV
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, dis…
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.82641 · Published 2026-10-22 · Partial fix · 1.0.10, 1.1.1 +2 CWE-252
Priority CRITICAL 90KEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.99999 · Published 2023-10-10 · Partial fix · 1.28.0, 0.17.0 +9 CWE-400
Priority HIGH 80
Envoy is a cloud-native, open source edge and service proxy.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.85015 · Published 2024-04-04 · Partial fix · 1.29.3, 1.28.2 +2 CWE-390
Priority HIGH 80
Envoy is a cloud-native, open-source edge and service proxy.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.83893 · Published 2024-04-04 · Fixed in 1.29.2 CWE-390
Priority HIGH 78
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00636 · Published 2023-04-04 · Partial fix · 1.25.3, 1.24.4 +2 CWE-20
Priority HIGH 75
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00814 · Published 2023-07-25 · Fixed in 1.26.4, 1.25.9 +2 CWE-116
Priority HIGH 74
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00507 · Published 2023-04-04 · Partial fix · 1.25.3, 1.24.4 +2 CWE-20
Priority HIGH 72
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00552 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-401
Priority HIGH 72
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00465 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-444
Priority HIGH 72
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00493 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-20
Priority HIGH 72
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00873 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-416
Priority HIGH 72
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00557 · Published 2026-06-26 · Partial fix · 1.38.1, 1.37.3 +2 CWE-1124
Priority HIGH 72
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00665 · Published 2026-06-26 · Fixed in 1.38.3, 1.37.5 CWE-476
Priority HIGH 72
Envoy is a cloud-native, open source edge and service proxy.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00674 · Published 2024-06-04 · Partial fix CWE-835
Priority HIGH 72
Envoy is a cloud-native, open source edge and service proxy.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00693 · Published 2024-06-04 · Will not fix CWE-191
Priority HIGH 72
Envoy is a cloud-native high-performance edge/middle/service proxy.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01652 · Published 2023-07-13 · Fixed in 1.26.3, 1.25.8 +2 CWE-400
Priority HIGH 72
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00876 · Published 2023-04-04 · Partial fix · 1.25.3, 1.24.4 +2 CWE-20
Priority HIGH 72
Envoy is a cloud-native high-performance proxy.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01607 · Published 2022-06-09 · Fixed in 1.22.1 CWE-400
Priority HIGH 71
Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00343 · Published 2025-09-03 · Fixed in 1.35.1, 1.34.5 +1 CWE-613
Priority HIGH 71
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00704 · Published 2023-07-25 · Fixed in 1.26.4, 1.25.9 +2 CWE-20
Priority HIGH 71
Envoy is a cloud-native edge/middle/service proxy.
CVSS 3.1HIGH 8.3· Network · No auth · No interaction · EPSS 0.63096 · Published 2021-05-28 · Fixed CWE-22
Priority HIGH 69
Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the total size of the headers stays below a maximum limit.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.64517 · Published 2019-10-09 · No fix listed CWE-400
Priority HIGH 68
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00618 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-79
Priority HIGH 68
Envoy is a cloud-native, open source edge and service proxy.
CVSS 4.0MEDIUM 6.6· Network · No auth · No interaction · EPSS 0.00456 · Published 2025-10-16 · Partial fix · 1.36.1, 1.35.5 +2 CWE-476
Priority HIGH 68
Envoy is a cloud-native high-performance edge/middle/service proxy.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00351 · Published 2024-09-19 · Fixed in 1.31.2, 1.30.6 +2 CWE-117
Load more
THREATIST.IORead the docs