Known vulnerabilities in envoy - page 2
Software:
envoy
Software CPE:
cpe:2.3:a:cncf:envoy:*:*:*:*:*:*:*:*
Website:
https://www.cncf.io/
Total vulnerabilities:
140
Public exploits:
3
Known exploited (KEV):
1
Breakdown by Severity Chart
1.40.0
1.36.13
1.37.9
1.38.7
1.39.4
1.38.6
1.37.8
1.36.12
1.39.3
1.36.11
1.37.7
1.38.5
1.39.2
1.36.10
1.37.6
1.38.4
1.39.1
1.39.0
1.38.3
1.37.5
1.36.9
1.35.13
1.38.2
1.37.4
1.36.8
1.35.12
1.38.1
1.37.3
1.36.7
1.35.11
1.38.0
1.37.2
1.36.6
1.35.10
1.34.14
1.37.1
1.36.5
1.35.9
1.34.13
1.37.0
1.36.4
1.35.8
1.34.12
1.33.14
1.36.3
1.35.7
1.34.11
1.33.13
1.36.2
1.35.6
1.34.10
1.33.12
1.34.9
1.35.5
1.36.1
1.33.11
1.36.0
1.35.4
1.34.8
1.33.10
1.32.13
1.35.3
1.34.7
1.33.9
1.32.12
1.35.2
1.34.6
1.33.8
1.32.11
1.35.1
1.34.5
1.33.7
1.32.10
1.34.4
1.33.6
1.32.9
1.35.0
1.34.3
1.33.5
1.32.8
1.31.10
1.34.2
1.33.4
1.32.7
1.31.9
1.34.1
1.33.3
1.32.6
1.31.8
1.34.0
1.33.2
1.32.5
1.31.7
1.30.11
1.33.1
1.32.4
1.31.6
1.30.10
1.33.0
1.32.3
1.31.5
1.30.9
1.29.12
1.32.2
1.31.4
1.30.8
1.29.11
1.32.1
1.31.3
1.30.7
1.29.10
1.32.0
1.31.2
1.30.6
1.29.9
1.28.7
1.31.1
1.30.5
1.29.8
1.28.6
1.31.0
1.30.4
1.29.7
1.28.5
1.27.7
1.30.3
1.29.6
1.28.4
1.29.5
1.30.2
1.27.6
1.30.1
1.29.4
1.28.3
1.27.5
1.30.0
1.29.3
1.28.2
1.27.4
1.26.8
1.29.2
1.29.1
1.28.1
1.27.3
1.26.7
1.29.0
1.28.0
1.27.2
1.26.6
1.25.11
1.24.12
1.25.10
1.26.5
1.27.1
1.24.11
1.27.0
1.25.9
1.26.4
1.24.10
1.23.12
1.26.3
1.25.8
1.24.9
1.23.11
1.26.2
1.25.7
1.24.8
1.23.10
1.26.1
1.25.6
1.24.7
1.23.9
1.26.0
1.25.5
1.24.6
1.23.8
1.22.11
1.25.4
1.24.5
1.23.7
1.22.10
1.25.3
1.24.4
1.23.6
1.22.9
1.25.2
1.24.3
1.23.5
1.22.8
1.22.7
1.23.4
1.24.2
1.25.1
1.25.0
1.24.1
1.23.3
1.22.6
1.21.6
1.24.0
1.23.2
1.23.1
1.22.5
1.22.4
1.22.3
1.21.5
1.20.7
1.23.0
1.20.6
1.20.5
1.21.4
1.22.2
1.22.1
1.21.3
1.20.4
1.19.5
1.21.2
1.20.3
1.19.4
1.22.0
1.21.1
1.20.2
1.19.3
1.18.6
1.21.0
1.20.1
1.20.0
1.16.5
1.17.4
1.18.4
1.19.1
1.19.0
1.15.5
1.16.4
1.17.3
1.18.3
1.18.2
1.14.7
1.15.4
1.16.3
1.17.2
1.18.0
1.18.1
1.17.1
1.13.8
1.17.0
1.16.2
1.13.7
1.14.6
1.15.3
1.16.1
1.16.0
1.15.2
1.13.6
1.12.7
1.13.5
1.14.5
1.15.1
1.12.6
1.13.4
1.14.4
1.15.0
1.12.5
1.13.3
1.14.3
1.12.4
1.13.2
1.14.2
1.14.1
1.14.0
1.13.1
1.13.0
1.12.3
1.12.2
1.12.1
1.12.0
1.11.2
1.11.1
1.11.0
1.10.0
1.9.1
1.9.0
1.8.0
1.7.1
1.7.0
1.6.0
1.5.0
1.4.0
1.3.0
1.2.0
1.1.0
1.0.0
Vulnerabilities (140)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU135119 - Resource exhaustion |
CWE-400 | Medium | 1.35.13, 1.37.0, 1.38.0 | 24.06.2026 |
SB2026062441 |
||
| #VU135105 - Heap-based Buffer Overflow CVE-2026-48706 |
CWE-122 | Medium | 1.35.12, 1.36.8, 1.37.4, 1.38.2 | 24.06.2026 |
SB2026062440 |
||
| #VU145838 - Improper Certificate Validation CVE-2022-21656 |
CWE-295 | Low | 1.20.2 | 22.02.2022 |
SB2022022248 |
||
| #VU145839 - Always-Incorrect Control Flow Implementation CVE-2022-21655 |
CWE-670 | Medium | 1.18.6, 1.19.3, 1.20.2, 1.21.1 | 22.02.2022 |
SB2022022248 |
||
| #VU145840 - Configuration CVE-2022-21654 |
CWE-16 | Low | 1.18.6, 1.19.3, 1.20.2, 1.21.1 | 22.02.2022 |
SB2022022248 |
||
| #VU145848 - Use After Free CVE-2021-43826 |
CWE-416 | Medium | 1.18.6, 1.19.3, 1.20.2, 1.21.1 | 22.02.2022 |
SB2022022248 |
||
| #VU145847 - Use After Free CVE-2021-43825 |
CWE-416 | Medium | 1.18.6, 1.19.3, 1.20.2, 1.21.1 | 22.02.2022 |
SB2022022248 |
||
| #VU145846 - NULL Pointer Dereference CVE-2021-43824 |
CWE-476 | Medium | 1.18.6, 1.19.3, 1.20.2, 1.21.1 | 22.02.2022 |
SB2022022248 |
||
| #VU145849 - Improper input validation CVE-2021-29492 |
CWE-20 | Medium | 1.15.5, 1.16.4, 1.17.3, 1.18.3 | 11.05.2021 |
SB2021051176 |
||
| #VU145850 - Integer overflow CVE-2021-28682 |
CWE-190 | Medium | 1.14.7, 1.15.4, 1.16.3, 1.17.2, 1.18.0 | 16.04.2021 |
SB2021041642 |
||
| #VU145851 - Uncaught Exception CVE-2021-28683 |
CWE-248 | Medium | 1.16.3, 1.17.2, 1.18.0 | 16.04.2021 |
SB2021041642 |
||
| #VU145852 - Reachable Assertion CVE-2021-29258 |
CWE-617 | Medium | 1.14.7, 1.15.4, 1.16.3, 1.17.2, 1.18.0 | 16.04.2021 |
SB2021041642 |
||
| #VU145853 - Improper Access Control CVE-2021-21378 |
CWE-284 | High | 1.17.1 | 09.03.2021 |
SB2021030980 |
||
| #VU145855 - Improper input validation |
CWE-20 | Medium | 1.16.1 | 17.12.2020 |
SB2020121750 |
||
| #VU145854 - Improper input validation |
CWE-20 | Medium | 1.13.7, 1.14.6, 1.15.3, 1.16.1 | 17.12.2020 |
SB2020121750 |
||
| #VU145856 - Improper input validation CVE-2020-25017 |
CWE-20 | Medium | 1.12.7, 1.13.5, 1.14.5, 1.15.1 | 29.09.2020 |
SB2020092920 |
||
| #VU145857 - Resource exhaustion CVE-2020-8663 |
CWE-400 | Medium | 1.12.5, 1.13.3, 1.14.3 | 30.06.2020 |
SB2020063045 |
||
| #VU145859 - Heap-based Buffer Overflow CVE-2019-18801 |
CWE-122 | Medium | 1.12.2 | 10.12.2019 |
SB20191210104 |
||
| #VU145858 - Improper input validation CVE-2019-18838 |
CWE-20 | Medium | 1.12.2 | 10.12.2019 |
SB20191210104 |
||
| #VU145860 - Resource exhaustion |
CWE-400 | Medium | 1.11.2 | 08.11.2019 |
SB2019110836 |
Showing elements 21 - 40 out of 140