Lucene search
+L

6 matches found

OSV
OSV
added 2026/03/12 8:39 a.m.41 views

BIT-ENVOY-2026-26309 Envoy has an off-by-one write in JsonEscaper::escapeString()

Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, an off-by-one write in Envoy::JsonEscaper::escapeString can corrupt std::string null-termination, causing undefined behavior and potentially leading to crashes or out-of-bounds reads when the...

5.3CVSS5.8AI score0.00365EPSS
SaveExploits1References2
Rows per page
Query Builder