271 matches found
EUVD-2025-201099
Envoy forwards early CONNECT data in TCP proxy mode...
CVE-2025-66220 Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte
Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, Envoy’s mTLS certificate matcher for matchtypedsubjectaltnames may incorrectly treat certificates containing an embedded null byte \0 inside an OTHERNAME SAN value as valid matches...
PT-2025-48980
Name of the Vulnerable Software and Affected Versions Envoy versions 1.33.12 through 1.36.2 Description Envoy’s mTLS certificate matcher for match typed subject alt names may incorrectly treat certificates containing an embedded null byte 0 inside an OTHERNAME SAN value as valid matches. This can...
Use-After-Free
github.com/envoyproxy/envoy is vulnerable to a Use-After-Free. The vulnerability is due to improper handling of DNS cache operations in the Dynamic Forward Proxy implementation, where a completion callback can trigger new or remove existing DNS resolutions, which allows an attacker to cause...
BIT-ENVOY-2025-62409 Envoy allows large requests and responses to cause TCP connection pool crash
Envoy is a cloud-native, open source edge and service proxy. Prior to 1.36.1, 1.35.5, 1.34.9, and 1.33.10, large requests and responses can potentially trigger TCP connection pool crashes due to flow control management in Envoy. It will happen when the connection is closing but upstream data is...
CVE-2025-62504 Envoy Lua filter use-after-free when oversized rewritten response body causes crash
Envoy is an open source edge and service proxy. Envoy versions earlier than 1.36.2, 1.35.6, 1.34.10, and 1.33.12 contain a use-after-free vulnerability in the Lua filter. When a Lua script executing in the response phase rewrites a response body so that its size exceeds the configured...
EUVD-2021-1430
Malware in sbrugna...
EUVD-2021-16089
Malware in sbrugna...
EUVD-2024-20837
Malicious code in bioql PyPI...
EUVD-2022-33587
Malicious code in bioql PyPI...
EUVD-2023-31256
Malicious code in bioql PyPI...
EUVD-2024-51925
Malicious code in bioql PyPI...
EUVD-2023-39928
Malicious code in bioql PyPI...
EUVD-2024-20839
Malicious code in bioql PyPI...
EUVD-2024-51926
Malicious code in bioql PyPI...
EUVD-2024-41615
Malicious code in bioql PyPI...
EUVD-2022-26874
Malicious code in bioql PyPI...
EUVD-2023-39926
Malicious code in bioql PyPI...