CVE-2026-47692 Envoy: PROXY Protocol v2 header generator emits "skipped" TLVs, causing 65 KB attacker-controlled spillover into the upstream application stream

[
  {
    "vendor": "envoyproxy",
    "product": "envoy",
    "versions": [
      {
        "version": ">= 1.38.0, < 1.38.3",
        "status": "affected"
      },
      {
        "version": ">= 1.37.0, < 1.37.5",
        "status": "affected"
      },
      {
        "version": ">= 1.36.0, < 1.36.9",
        "status": "affected"
      },
      {
        "version": ">= 1.34.0, < 1.35.13",
        "status": "affected"
      }
    ]
  }
]