568 matches found
CVE-2025-64763 Envoy forwards early CONNECT data in TCP proxy mode
Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, when Envoy is configured in TCP proxy mode to handle CONNECT requests, it accepts client data before issuing a 2xx response and forwards that data to the upstream TCP connection. If a forwardi...
CVE-2025-64763 Envoy forwards early CONNECT data in TCP proxy mode
Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, when Envoy is configured in TCP proxy mode to handle CONNECT requests, it accepts client data before issuing a 2xx response and forwards that data to the upstream TCP connection. If a forwardi...
CVE-2025-64763 Envoy forwards early CONNECT data in TCP proxy mode
Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, when Envoy is configured in TCP proxy mode to handle CONNECT requests, it accepts client data before issuing a 2xx response and forwards that data to the upstream TCP connection. If a forwardi...
PT-2025-48970
Name of the Vulnerable Software and Affected Versions Envoy versions 1.33.12 through 1.36.2 Description Envoy, a high-performance edge/middle/service proxy, has an issue when configured in TCP proxy mode to handle CONNECT requests. It accepts client data before issuing a 2xx response and forwards...
MAL-2025-189486 Malicious code in sigma-class-new-root-reject (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77fbeea5b52e1afb7cd1f89ed2cce35cb4dcb3522c66c0a9d069daa9a5422c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176146
Malicious code in sudo-reject-mu-proxy-fork npm...
EUVD-2025-176060
Malicious code in tau-float-string-reject-byte npm...
EUVD-2025-175988
Malicious code in test-sigma-reject-daemon-cold npm...
EUVD-2025-175818
Malicious code in unix-execute-file-route-reject npm...
EUVD-2025-175748
Malicious code in user-reject-good-code-sed npm...
EUVD-2025-175712
Malicious code in virtualize-reject-secure-finally-function npm...
EUVD-2025-177474
Malicious code in old-reject-mu-char-decrypt npm...
EUVD-2025-177216
Malicious code in phi-void-long-reject-import npm...
EUVD-2025-176989
Malicious code in protected-reject-decrypt-bad-big npm...
EUVD-2025-176728
Malicious code in reject-book-catch-module-short npm...
EUVD-2025-176727
Malicious code in reject-finally-data-big-long npm...
EUVD-2025-176726
Malicious code in reject-process-link-cat-encrypt npm...
EUVD-2025-176724
Malicious code in reject-static-theta-info-try npm...