envoyproxy gateway

• CVE-2026-53714 High 7.4 Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode 0.3%
• CVE-2026-53716 Medium 6.5 Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit 0.7%
• CVE-2026-53715 Medium 5.3 Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock 0.5%
• CVE-2026-53719 Medium 6.5 Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization 0.7%
• CVE-2026-53718 Medium 6.4 Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass 0.4%
• CVE-2026-53713 Critical 9.1 Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure 0.4%
• CVE-2026-53717 Medium 6.5 Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header 0.7%
• CVE-2026-22771 High 8.8 Envoy Extension Policy lua scripts injection causes arbitrary command execution 0.6%
• CVE-2025-25294 Medium 5.3 Envoy Gateway Log Injection Vulnerability 0.3%
• CVE-2025-24030 High 7.1 Envoy Admin Interface Exposed through prometheus metrics endpoint 0.4%