CVE-2026-107492

...

CVE-2026-107492

This CVE ID is rejected or withdrawn by its CVE Numbering Authority and does not represent an active vulnerability entry.

CVE-2023-27487

A flaw was found in envoy. The header x-envoy-original-path should be an internal header, but Envoy does not remove this header from the request at the beginning of request processing when it is sent from an untrusted client. The faked header could then be used for trace logs and grpc logs, used ...