Priority CRITICAL 99KEV
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, dis…
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.82641 · Published 2026-10-22 · Partial fix · 1.0.10, 1.1.1 +2 CWE-252
Priority LOW 30
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00376 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-289
Priority HIGH 66
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00507 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-436
Priority LOW 31
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00527 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-647
Priority HIGH 68
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00618 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-79
Priority HIGH 72
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00873 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-416
Priority HIGH 72
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00552 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-401
Priority MEDIUM 40
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00554 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-20
Priority MEDIUM 60
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00739 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-476
Priority LOW 25
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00618 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-754
Priority HIGH 72
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00493 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-20
Priority LOW 39
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0049 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-20
Priority HIGH 72
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00465 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-444
Priority LOW 28
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0068 · Published 2026-09-21 · Fixed in 1.36.10, 1.37.6 +2 CWE-416
Priority LOW 32
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway.
CVSS 3.1HIGH 7.4· Adjacent network · No auth · No interaction · EPSS 0.00348 · Published 2026-09-14 · Fixed in 1.7.4, 1.8.1 CWE-306
Priority LOW 30
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00715 · Published 2026-09-14 · Partial fix · 1.7.4, 1.8.1 CWE-789
Priority LOW 24
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway.
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00467 · Published 2026-09-14 · Partial fix · 1.7.4, 1.8.1 CWE-362
Priority LOW 30
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00715 · Published 2026-09-14 · Partial fix · 1.7.4, 1.8.1 CWE-476
Priority LOW 29
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00413 · Published 2026-09-14 · Partial fix · 1.7.4, 1.8.1 CWE-862
Priority MEDIUM 40
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway.
CVSS 3.1CRITICAL 9.1· Network · Low privileges · No interaction · EPSS 0.00433 · Published 2026-09-14 · Fixed in 1.7.4, 1.8.1 CWE-20
Priority LOW 30
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00715 · Published 2026-09-14 · Partial fix · 1.7.4, 1.8.1 CWE-789
Priority MEDIUM 60
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00579 · Published 2026-06-26 · Fixed in 1.38.3, 1.37.5 CWE-416
Priority HIGH 72
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00665 · Published 2026-06-26 · Fixed in 1.38.3, 1.37.5 CWE-476
Priority MEDIUM 60
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00387 · Published 2026-06-26 · Fixed in 1.38.3, 1.37.5 +1 CWE-416
Priority LOW 21
Envoy is an open source edge and service proxy designed for cloud-native applications.
CVSS 3.1MEDIUM 4.8· Adjacent network · High privileges · No interaction · EPSS 0.00218 · Published 2026-06-26 · Partial fix · 1.38.3, 1.37.5 +2 CWE-130
Load more
THREATIST.IORead the docs