CVE-2026-53713: Improper Input Validation

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, toabsolutenormalizedpath in internal/gatewayapi/luavalidator/security.lua does not collapse redundant separators before iscriticalpath evaluates Lua...

CVE-2026-53718: Missing Authorization

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, an HTTPRoute can use an extension-managed custom backendRef to reference a backend resource in another namespace without a matching Gateway API...

GO-2026-4942 vulnerabilities

Vulnerabilities for packages: envoy-gateway, portieris, gitness, argocd-image-updater, zot, kots...

GO-2025-3418 vulnerabilities

Vulnerabilities for packages: envoy-gateway...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: k3s, envoy-gateway-fips, envoy-gateway, spire-server, commercial-expanso-edge, kots, commercial-chainloop-backend, kine, commercial-grafana...

GO-2026-4771 vulnerabilities

Vulnerabilities for packages: vault, grafana, envoy-gateway-fips, vault-fips, gitlab-elasticsearch-indexer-fips, gitlab-elasticsearch-indexer, teleport, gitaly, commercial-grafana...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitness, envoy-gateway-fips, envoy-gateway, argocd-image-updater-fips, gitlab-rails-ce, kots, portieris, zot, portieris-fips, argocd-image-updater...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitness, envoy-gateway-fips, envoy-gateway, argocd-image-updater-fips, gitlab-rails-ce, kots, portieris, zot, portieris-fips, argocd-image-updater...

GO-2026-5882 vulnerabilities

Vulnerabilities for packages: kots, kargo, linkerd2, rancher-fleet, cloudbeat, kubescape-server, eksctl, helm-operator-fips, helm-exporter-fips, k9s-fips, tigera-operator, cloudbeat-fips, helm, cilium-cli, oras-fips, zarf-fips, kyverno-fips, falcoctl, headlamp-fips, kube-mgmt-fips, ratify,...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: zarf, gptscript, gitness, k9s, terraform, opentofu, vcluster, trufflehog, gitleaks, steampipe, grafana-alloy, podman, terragrunt, nuclei, trivy-operator, undock, tflint, kubescape-operator, envoy-gateway, xeol, rancher-fleet, filebrowser, nsc, zot, trivy, guac...

GO-2025-3418 vulnerabilities

Vulnerabilities for packages: envoy-gateway...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: envoy-gateway, spire-server, kine, kots, k3s...

GO-2025-3802 vulnerabilities

Vulnerabilities for packages: zarf, k8sgpt, k9s, istio, flux-source-controller, chartmuseum, helm-push, cerbos, kargo, eksctl, linkerd2, pluto, tw, chart-testing, helm-docs, flux-helm-controller, cluster-api-helm-controller, cilium-cli, envoy-gateway, rancher-fleet, k8ssandra-client, rancher-helm...

GO-2026-5094 vulnerabilities

Vulnerabilities for packages: envoy-gateway, portieris, gitness, argocd-image-updater, zot, kots...

GO-2026-5185 vulnerabilities

Vulnerabilities for packages: envoy-gateway, portieris, gitness, argocd-image-updater, zot, kots...

GO-2026-6009 Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway

Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway...

GO-2026-6007 Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway

Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway...

GO-2026-6005 Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway

Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway...

GO-2026-6003 Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway

Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway...

GO-2026-6006 Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway

Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway...