CLEANSTART-2026-HM36104 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-KI06386 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-CU84293 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-SS88453 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-OY08890 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-VN85659 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

CLEANSTART-2026-XN53923 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Security vulnerability affects the tigera-operator-fips package. Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway...

GHSA-P7V4-VR35-MJ6F vulnerabilities

Vulnerabilities for packages: k3s-fips, newrelic-infrastructure-agent-fips, envoy-gateway-fips, envoy-gateway...

GO-2026-6791 vulnerabilities

Vulnerabilities for packages: k3s-fips, newrelic-infrastructure-agent-fips, envoy-gateway-fips, envoy-gateway...

CVE-2026-95837 vulnerabilities

Vulnerabilities for packages: k3s-fips, newrelic-infrastructure-agent-fips, envoy-gateway-fips, envoy-gateway...

GO-2026-6686 vulnerabilities

Vulnerabilities for packages: crossplane-function-kcl, amazon-ecs-agent-fips, kubevirt-cdi-uploadserver, rancher-agent, xeol, eks-distro-fips, rke2-runtime, ctop, crossplane-function-kcl-fips, umoci, undock, eks-distro, vcluster, k8s-image-swapper-fips, cloudbeat-fips, gosu, packer-fips,...

CVE-2026-53713

A flaw was found in Envoy Gateway. An authenticated attacker with permissions to submit Lua extension policies can bypass file path restrictions by submitting paths containing redundant slashes. This flaw allows the attacker to read arbitrary files from the gateway controller container, resulting...

GO-2026-6597 vulnerabilities

Vulnerabilities for packages: k3s-fips, teleport, redpanda-operator, amazon-ecs-agent-fips, trivy-operator, consul-k8s-fips, trivy, k8sgpt, cloudbeat-fips, harvester-fips, datadog-agent-fips, headlamp, livekit-cli, helm-exporter, syft-fips, kubevela-fips, helm-mapkubeapis, docker, crossplane-cli,...

CVE-2026-53716

A flaw was found in Envoy Gateway. A remote attacker, by providing a specially crafted compressed WebAssembly Wasm payload through a tenant-controlled URL, can exploit a vulnerability where the system decompresses the gzip file without limiting the output size. This can lead to an uncontrolled...

CVE-2026-53715

A flaw was found in Envoy Gateway. Improper synchronization in the Wasm cache handling allows an attacker with pod-network access and tenant permissions to trigger a race condition. By flooding GET requests, an attacker can cause a read-write overlap, leading to the termination of the controller...

CVE-2026-53718

A flaw was found in Envoy Gateway. An attacker could exploit a vulnerability in how HTTPRoute handles custom backend references. This allows a route-owning namespace to access and utilize resources in another namespace without proper authorization, bypassing the intended Gateway API cross-namespa...

CVE-2026-53714

A flaw was found in Envoy Gateway. When operating in GatewayNamespaceMode, the xDS gRPC server fails to properly authenticate certain unary Fetch RPCs and State-of-the-World protocol messages. This oversight allows any pod with network access to port 18000 to retrieve sensitive information. An...

BIT-ENVOY-GATEWAY-2026-53719 Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value when a namespace-scoped tenant create...

BIT-ENVOY-GATEWAY-2026-53718 Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, an HTTPRoute can use an extension-managed custom backendRef to reference a backend resource in another namespace without a matching Gateway API...

BIT-ENVOY-GATEWAY-2026-53717 Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, internal/wasm/imagefetcher.go follows tenant-controlled EnvoyExtensionPolicy spec.wasm.code.image.url values to Docker or OCI Wasm layers, and...