CVE-2026-33816 vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, commercial-grafana, commercial-expanso-edge, kots, kine, commercial-chainloop-backend, spire-server, envoy-gateway, k3s...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: envoy-gateway-fips, helm-mapkubeapis, kubescape, kubescape-server, cluster-api-helm-controller-fips, headlamp-fips, zarf-fips, kots, rancher-fleet-fips, flux, helm-diff, cloudbeat-fips, trivy-fips, cilium-cli, istio, rancher-fleet, nova, headlamp, kube-arangodb, plut...

GHSA-3P65-76G6-3W7R vulnerabilities

Vulnerabilities for packages: envoy-gateway, portieris, argocd-image-updater, zot, kots, gitness...

CVE-2026-35172 vulnerabilities

Vulnerabilities for packages: envoy-gateway, portieris, argocd-image-updater, zot, kots, gitness...

GHSA-F2G3-HH2R-CWGC vulnerabilities

Vulnerabilities for packages: envoy-gateway, portieris, argocd-image-updater, zot, kots, gitness...

CVE-2026-33540 vulnerabilities

Vulnerabilities for packages: envoy-gateway, portieris, argocd-image-updater, zot, kots, gitness...

GHSA-3P65-76G6-3W7R vulnerabilities

Vulnerabilities for packages: gitness, envoy-gateway-fips, argocd-image-updater, argocd-image-updater-fips, gitlab-rails-ce, kots, portieris-fips, portieris, zot, gitlab-rails-ce-fips, envoy-gateway...

CVE-2026-33540 vulnerabilities

Vulnerabilities for packages: gitness, envoy-gateway-fips, argocd-image-updater, argocd-image-updater-fips, gitlab-rails-ce, kots, portieris-fips, portieris, zot, gitlab-rails-ce-fips, envoy-gateway...

GHSA-F2G3-HH2R-CWGC vulnerabilities

Vulnerabilities for packages: gitness, envoy-gateway-fips, argocd-image-updater, argocd-image-updater-fips, gitlab-rails-ce, kots, portieris-fips, portieris, zot, gitlab-rails-ce-fips, envoy-gateway...

CVE-2026-35172 vulnerabilities

Vulnerabilities for packages: gitness, envoy-gateway-fips, argocd-image-updater, argocd-image-updater-fips, gitlab-rails-ce, kots, portieris-fips, portieris, zot, gitlab-rails-ce-fips, envoy-gateway...

SUSE CVE-2026-22771

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy's credentials. These credentials can then be used to communica...

CVE-2026-22771

A flaw was found in Envoy Gateway. EnvoyExtensionPolicy Lua scripts, when executed by the Envoy proxy, can be exploited to leak the proxy's credentials. An attacker can then use these credentials to communicate with the control plane and gain unauthorized access to all secrets managed by the Envo...

BIT-ENVOY-GATEWAY-2026-22771 Envoy Extension Policy lua scripts injection causes arbitrary command execution

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy's credentials. These credentials can then be used to communica...

EUVD-2026-2007

Envoy Extension Policy lua scripts injection causes arbitrary command execution...

CVE-2026-22771

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy's credentials. These credentials can then be used to communica...

CVE-2026-22771 Envoy Extension Policy lua scripts injection causes arbitrary command execution

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by Envoy proxy can be used to leak the proxy's credentials. These credentials can then be used to communica...

CVE-2026-22771

Summary: CVE-2026-22771 affects Envoy Gateway. Prior to versions 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by the Envoy proxy can leak credentials (e.g., TLS private keys and other secrets) used by the proxy, enabling access to control-plane secrets. The issue is described across...

Envoy Gateway 代码注入漏洞

Envoy Gateway is an Envoy Proxy open source that uses the Envoy agent as a gateway for standalone or Kubernetes-based applications. A code injection vulnerability exists in Envoy Gateway versions prior to 1.5.7 and prior to 1.6.2 that stems from the EnvoyExtensionPolicy Lua script that could...

PT-2026-2290

Name of the Vulnerable Software and Affected Versions Envoy Gateway versions prior to 1.5.7 Envoy Gateway versions prior to 1.6.2 Description Envoy Gateway is an open source project for managing Envoy Proxy. EnvoyExtensionPolicy Lua scripts executed by the proxy can be used to leak the proxy's...

Envoy 安全漏洞

Envoy is an Enphase open source gateway program for connecting smart home devices. A security vulnerability exists in Envoy versions 1.33.12, 1.34.10, 1.35.6, 1.36.2, and prior versions, which stems from the mTLS certificate matcher incorrectly handling certificates embedded with null bytes, whic...