Lucene search
+L

9 matches found

OSV
OSV
•added 2026/09/29 8:42 a.m.•4 views

BIT-ENVOY-2026-48521 Envoy: HTTP/3 connection pool selection null-derefs in ProdClusterManagerFactory::allocateConnPool when transport_socket_options is null

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ProdClusterManagerFactory::allocateConnPool dereferences transportsocketoptions while selecting an HTTP/3 connection pool without first checking whether the...

5.9CVSS5.8AI score0.00699EPSS
SaveExploits0References10
Rows per page
Query Builder