Read the docs

envoyproxy

Records137All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high87CVSS 7.0–8.9

Exploited now

envoyproxy records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

3 records in Gateway · all components

TI-2025-18948 CVE-2025-25294 · GHSA-mf24-chxh-hmvj

Envoy Gateway Log Injection Vulnerability

Priority LOW 30

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00286 Published 2025-03-06 Partial fix · 1.3.1, 1.2.7 CWE-117
Open these records in search →