PT-2025-42518

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.1 Envoy versions prior to 1.35.5 Envoy versions prior to 1.34.9 Envoy versions prior to 1.33.10 Description Envoy is a cloud-native, open source edge and service proxy. Large requests and responses can potentially...

CVE-2025-62409: NULL Pointer Dereference

Envoy is a cloud-native, open source edge and service proxy. Prior to 1.36.1, 1.35.5, 1.34.9, and 1.33.10, large requests and responses can potentially trigger TCP connection pool crashes due to flow control management in Envoy. It will happen when the connection is closing but upstream data is...