Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

envoy Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Published	Severity

`CVE-2026-48090`Envoy HTTP: OAuth2 filter late async token completion after stream teardown (UAF / crash risk)	Exploitation statusPublic exploit	FixYes	Published06/26/2026	SeverityMedium
`CVE-2026-47220`Envoy: Segmentation fault when using %REQUESTED_SERVER_NAME% in log format	Exploitation statusPublic exploit	FixYes	Published06/26/2026	SeverityHigh
`CVE-2026-47205`Envoy: ext_authz Use-After-Free during Stream Teardown with Per-Route Overrides	Exploitation statusPublic exploit	FixYes	Published06/26/2026	SeverityMedium
`CVE-2026-47692`Envoy: PROXY Protocol v2 header generator emits "skipped" TLVs, causing 65 KB attacker-controlled spillover into the upstream application stream	Exploitation statusNot known exploited	FixYes	Published06/26/2026	SeverityMedium
`CVE-2026-47207`Envoy crashes if multiple unexpected ext_proc responses are packed into one gRPC message	Exploitation statusPublic exploit	FixYes	Published06/26/2026	SeverityMedium
`CVE-2026-48706`Envoy Heap Buffer Overflow in TcpStatsdSink	Exploitation statusNot known exploited	FixYes	Published06/26/2026	SeverityMedium
`CVE-2026-47204`Envoy: grpc_stats filter segfault on Connect protocol requests to direct_response routes	Exploitation statusPublic exploit	FixYes	Published06/26/2026	SeverityMedium
`CVE-2026-47221`Envoy: Null pointer deref in internal redirects	Exploitation statusPublic exploit	FixYes	Published06/26/2026	SeverityMedium
`CVE-2026-48743`Envoy: HTTP/3 to HTTP/1 request smuggling via headers-only request with nonzero Content-Length	Exploitation statusPublic exploit	FixYes	Published06/26/2026	SeverityHigh
`CVE-2026-48497`Envoy: Abnormal process termination in DNS UDP filter	Exploitation statusNot known exploited	FixYes	Published06/26/2026	SeverityMedium
`CVE-2026-48044`Envoy Zstd Decompressor: Ratio Check at Wrong Loop Depth lead to memory explosion	Exploitation statusNot known exploited	FixYes	Published06/26/2026	SeverityHigh
`CVE-2026-48042`Envoy: Stack overflow in destructor of highly nested JSON	Exploitation statusPublic exploit	FixYes	Published06/26/2026	SeverityHigh
`CVE-2026-47778`Envoy: Embedded NUL in TLS DNS SAN Truncation in the Default TLS Certificate Validator. (Auth Bypass)	Exploitation statusPublic exploit	FixYes	Published06/26/2026	SeverityMedium
`CVE-2026-47775`Envoy OAuth2 Filter: Padding Oracle via AES-256-CBC Cookie Decryption	Exploitation statusPublic exploit	FixYes	Published06/26/2026	SeverityMedium
`CVE-2026-47774`Envoy vulnerable to HTTP/2 memory exhaustion via cookie header size bypass and HPACK amplification	Exploitation statusNot known exploited	FixNot confirmed	Published06/17/2026	SeverityHigh
`CVE-2026-26330`Envoy global rate limit may crash when the response phase limit is enabled and the response phase request is failed directly	Exploitation statusNot known exploited	FixYes	Published03/10/2026	SeverityMedium
`CVE-2026-26311`Envoy HTTP: filter chain execution on reset streams causing UAF crash	Exploitation statusPublic exploit	FixYes	Published03/10/2026	SeverityMedium
`CVE-2026-26310`Crash for scoped ip address in Envoy during DNS	Exploitation statusNot known exploited	FixYes	Published03/10/2026	SeverityMedium
`CVE-2026-26309`Envoy has an off-by-one write in JsonEscaper::escapeString()	Exploitation statusNot known exploited	FixYes	Published03/10/2026	SeverityMedium
`CVE-2026-26308`Envoy has an RBAC Header Validation Bypass via Multi-Value Header Concatenation	Exploitation statusNot known exploited	FixYes	Published03/10/2026	SeverityHigh
`CVE-2025-66220`Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte	Exploitation statusPublic exploit	FixNot confirmed	Published12/03/2025	SeverityMedium
`CVE-2025-64763`Envoy forwards early CONNECT data in TCP proxy mode	Exploitation statusNot known exploited	FixNot confirmed	Published12/03/2025	SeverityLow
`CVE-2025-64527`Envoy crashes when JWT authentication is configured with the remote JWKS fetching	Exploitation statusNot known exploited	FixNot confirmed	Published12/03/2025	SeverityMedium
`CVE-2025-62504`Envoy Lua filter use-after-free when oversized rewritten response body causes crash	Exploitation statusNot known exploited	FixNot confirmed	Published10/16/2025	SeverityMedium
`CVE-2025-62409`Envoy allows large requests and responses to cause TCP connection pool crash	Exploitation statusPublic exploit	FixYes	Published10/16/2025	SeverityMedium
`CVE-2025-55162`Envoy: oAuth2 Filter Signout route will not clear cookies because of missing "secure;" flag	Exploitation statusPublic exploit	FixYes	Published09/03/2025	SeverityMedium
`CVE-2025-54588`Envoy: Race condition in Dynamic Forward Proxy leads to use-after-free and segmentation faults	Exploitation statusNot known exploited	FixYes	Published09/02/2025	SeverityHigh
`CVE-2025-46821`Envoy vulnerable to bypass of RBAC uri_template permission	Exploitation statusNot known exploited	FixYes	Published05/07/2025	SeverityMedium
`CVE-2025-30157`Envoy crashes when HTTP ext_proc processes local replies	Exploitation statusPublic exploit	FixYes	Published03/21/2025	SeverityMedium
`CVE-2024-53271`HTTP/1.1 multiple issues with envoy.reloadable_features.http1_balsa_delay_reset in envoy	Exploitation statusPublic exploit	FixNot confirmed	Published12/18/2024	SeverityHigh
`CVE-2024-53270`HTTP/1: sending overload crashes when the request is reset beforehand in envoy	Exploitation statusPublic exploit	FixNot confirmed	Published12/18/2024	SeverityHigh
`CVE-2024-53269`Happy Eyeballs: Validate that additional_address are IP addresses instead of crashing when sorting in envoy	Exploitation statusPublic exploit	FixNot confirmed	Published12/18/2024	SeverityMedium
`CVE-2024-45806`Potential manipulate `x-envoy` headers from external sources in envoy	Exploitation statusPublic exploit	FixNot confirmed	Published09/19/2024	SeverityMedium
`CVE-2024-45807`oghttp2 crash on OnBeginHeadersForStream in envoy	Exploitation statusNot known exploited	FixNot confirmed	Published09/19/2024	SeverityHigh
`CVE-2024-45808`Malicious log injection via access logs in envoy	Exploitation statusPublic exploit	FixNot confirmed	Published09/19/2024	SeverityMedium
`CVE-2024-45809`Jwt filter crash in the clear route cache with remote JWKs in envoy	Exploitation statusNot known exploited	FixNot confirmed	Published09/19/2024	SeverityMedium
`CVE-2024-45810`Envoy crashes for LocalReply in http async client	Exploitation statusNot known exploited	FixNot confirmed	Published09/19/2024	SeverityMedium
`CVE-2024-39305`Envoy Proxy use after free when route hash policy is configured with cookie attributes	Exploitation statusNot known exploited	FixYes	Published07/01/2024	SeverityMedium
`CVE-2024-32974`Envoy affected by a crash in EnvoyQuicServerStream::OnInitialHeadersComplete()	Exploitation statusNot known exploited	FixNot confirmed	Published06/04/2024	SeverityMedium
`CVE-2024-32975`Envoy crashes in QuicheDataReader::PeekVarInt62Length()	Exploitation statusPublic exploit	FixNot confirmed	Published06/04/2024	SeverityMedium
`CVE-2024-32976`Envoy can enter an endless loop while decompressing Brotli data with extra input	Exploitation statusPublic exploit	FixNot confirmed	Published06/04/2024	SeverityHigh
`CVE-2024-34362`Envoy affected by a crash (use-after-free) in EnvoyQuicServerStream	Exploitation statusPublic exploit	FixNot confirmed	Published06/04/2024	SeverityMedium
`CVE-2024-34363`Envoy can crash due to uncaught nlohmann JSON exception	Exploitation statusNot known exploited	FixNot confirmed	Published06/04/2024	SeverityHigh
`CVE-2024-34364`Envoy OOM vector from HTTP async client with unbounded response buffer for mirror response	Exploitation statusNot known exploited	FixNot confirmed	Published06/04/2024	SeverityMedium
`CVE-2024-23326`Envoy incorrectly accepts HTTP 200 response for entering upgrade mode	Exploitation statusNot known exploited	FixNot confirmed	Published06/04/2024	SeverityMedium
`CVE-2024-32475`Envoy RELEASE_ASSERT using auto_sni with :authority header > 255 bytes	Exploitation statusNot known exploited	FixYes	Published04/18/2024	SeverityHigh
`CVE-2024-30255`HTTP/2: CPU exhaustion due to CONTINUATION frame flood	Exploitation statusNot known exploited	FixNot confirmed	Published04/04/2024	SeverityMedium
`CVE-2024-27919`HTTP/2: memory exhaustion due to CONTINUATION frame flood	Exploitation statusNot known exploited	FixNot confirmed	Published04/04/2024	SeverityHigh
`CVE-2024-23322`Envoy crashes when idle and request per try timeout occur within the backoff interval	Exploitation statusNot known exploited	FixNot confirmed	Published02/09/2024	SeverityHigh
`CVE-2024-23323`Excessive CPU usage when URI template matcher is configured using regex in Envoy	Exploitation statusNot known exploited	FixNot confirmed	Published02/09/2024	SeverityMedium
`CVE-2024-23324`Envoy ext auth can be bypassed when Proxy protocol filter sets invalid UTF-8 metadata	Exploitation statusNot known exploited	FixNot confirmed	Published02/09/2024	SeverityHigh
`CVE-2024-23325`Envoy crashes when using an address type that isn’t supported by the OS	Exploitation statusNot known exploited	FixNot confirmed	Published02/09/2024	SeverityHigh
`CVE-2024-23327`Crash in proxy protocol when command type of LOCAL in Envoy	Exploitation statusNot known exploited	FixNot confirmed	Published02/09/2024	SeverityHigh
`CVE-2023-44487`	Exploitation statusKEV	FixNot confirmed	Published10/10/2023	SeverityHigh
`CVE-2023-35944`Envoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes	Exploitation statusPublic exploit	FixNot confirmed	Published07/25/2023	SeverityHigh
`CVE-2023-35943`Envoy vulnerable to CORS filter segfault when origin header is removed	Exploitation statusPublic exploit	FixNot confirmed	Published07/25/2023	SeverityMedium
`CVE-2023-35942`Envoy's gRPC access log crash caused by the listener draining	Exploitation statusPublic exploit	FixNot confirmed	Published07/25/2023	SeverityMedium
`CVE-2023-35941`Envoy vulnerable to OAuth2 credentials exploit with permanent validity	Exploitation statusPublic exploit	FixNot confirmed	Published07/25/2023	SeverityHigh
`CVE-2023-35945`Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec	Exploitation statusPublic exploit	FixYes	Published07/13/2023	SeverityHigh
`CVE-2023-27496`Envoy may crash when a redirect url without a state param is received in the oauth filter	Exploitation statusNot known exploited	FixNot confirmed	Published04/04/2023	SeverityMedium
`CVE-2023-27493`Envoy doesn't escape HTTP header values	Exploitation statusPublic exploit	FixNot confirmed	Published04/04/2023	SeverityHigh
`CVE-2023-27492`Envoy may crash when a large request body is processed in Lua filter	Exploitation statusPublic exploit	FixNot confirmed	Published04/04/2023	SeverityMedium
`CVE-2023-27491`Envoy forwards invalid Http2/Http3 downstream headers	Exploitation statusPublic exploit	FixYes	Published04/04/2023	SeverityMedium
`CVE-2023-27488`Envoy gRPC client produces invalid protobuf when an HTTP header with non-UTF8 value is received.	Exploitation statusNot known exploited	FixNot confirmed	Published04/04/2023	SeverityMedium
`CVE-2023-27487`Envoy client may fake the header `x-envoy-original-path`	Exploitation statusPublic exploit	FixNot confirmed	Published04/04/2023	SeverityHigh
`CVE-2022-29227`Use after free in Envoy	Exploitation statusNot known exploited	FixNot confirmed	Published06/09/2022	SeverityHigh
`CVE-2022-29226`Trivial authentication bypass in Envoy	Exploitation statusNot known exploited	FixNot confirmed	Published06/09/2022	SeverityCritical
`CVE-2022-29228`Reachable assertion in Envoy	Exploitation statusNot known exploited	FixNot confirmed	Published06/09/2022	SeverityHigh
`CVE-2022-29225`Zip bomb vulnerability in Envoy	Exploitation statusPublic exploit	FixNot confirmed	Published06/09/2022	SeverityHigh
`CVE-2022-29224`Segmentation fault leading to crash in Envoy	Exploitation statusNot known exploited	FixNot confirmed	Published06/09/2022	SeverityMedium
`CVE-2021-43826`Crash when tunneling TCP over HTTP in Envoy	Exploitation statusNot known exploited	FixNot confirmed	Published02/22/2022	SeverityHigh
`CVE-2021-43825`Use-after-free in Envoy	Exploitation statusNot known exploited	FixNot confirmed	Published02/22/2022	SeverityMedium
`CVE-2022-21655`Incorrect handling of internal redirects results in crash in Envoy	Exploitation statusNot known exploited	FixNot confirmed	Published02/22/2022	SeverityHigh
`CVE-2022-21654`Incorrect configuration handling allows TLS session re-use without re-validation in Envoy	Exploitation statusNot known exploited	FixNot confirmed	Published02/22/2022	SeverityHigh
`CVE-2022-21657`X.509 Extended Key Usage and Trust Purposes bypass in Envoy	Exploitation statusNot known exploited	FixNot confirmed	Published02/22/2022	SeverityMedium
`CVE-2022-21656`X.509 subjectAltName matching bypass in Envoy	Exploitation statusNot known exploited	FixNot confirmed	Published02/22/2022	SeverityHigh
`CVE-2022-23606`Crash when a cluster is deleted in Envoy	Exploitation statusNot known exploited	FixNot confirmed	Published02/22/2022	SeverityMedium
`CVE-2021-43824`Null pointer dereference in envoy	Exploitation statusNot known exploited	FixNot confirmed	Published02/22/2022	SeverityHigh
`CVE-2021-39206`Incorrect Authorization with specially crafted requests	Exploitation statusNot confirmed	FixNot confirmed	Published09/09/2021	SeverityHigh
`CVE-2021-39204`Excessive CPU usage in Pomerium	Exploitation statusNot confirmed	FixNot confirmed	Published09/09/2021	SeverityHigh
`CVE-2021-39162`Incorrect handling of H2 GOAWAY + SETTINGS frames	Exploitation statusNot confirmed	FixNot confirmed	Published09/09/2021	SeverityHigh
`CVE-2021-32780`Incorrect handling of H/2 GOAWAY followed by SETTINGS frames	Exploitation statusNot confirmed	FixNot confirmed	Published08/24/2021	SeverityHigh
`CVE-2021-32781`Continued processing of requests after locally generated response	Exploitation statusNot confirmed	FixNot confirmed	Published08/24/2021	SeverityHigh
`CVE-2021-32779`Incorrectly handling of URI '#fragment' element as part of the path element	Exploitation statusNot confirmed	FixNot confirmed	Published08/24/2021	SeverityHigh
`CVE-2021-32778`Excessive CPU utilization when closing HTTP/2 streams	Exploitation statusNot confirmed	FixNot confirmed	Published08/24/2021	SeverityMedium
`CVE-2021-32777`Incorrect concatenation of multiple value request headers in ext-authz extension	Exploitation statusNot confirmed	FixNot confirmed	Published08/24/2021	SeverityHigh
`CVE-2021-29492`Bypass of path matching rules using escaped slash characters	Exploitation statusNot confirmed	FixNot confirmed	Published05/28/2021	SeverityHigh
`CVE-2021-29258`	Exploitation statusNot confirmed	FixNot confirmed	Published05/20/2021	SeverityUnknown
`CVE-2021-28683`	Exploitation statusNot confirmed	FixNot confirmed	Published05/20/2021	SeverityUnknown
`CVE-2021-28682`	Exploitation statusNot confirmed	FixNot confirmed	Published05/20/2021	SeverityUnknown
`CVE-2021-21378`JWT authentication bypass with unknown issuer token	Exploitation statusNot confirmed	FixYes	Published03/11/2021	SeverityHigh
`CVE-2020-35470`	Exploitation statusNot confirmed	FixNot confirmed	Published12/15/2020	SeverityUnknown
`CVE-2020-35471`	Exploitation statusNot confirmed	FixNot confirmed	Published12/15/2020	SeverityUnknown
`CVE-2020-25018`	Exploitation statusNot confirmed	FixNot confirmed	Published10/01/2020	SeverityUnknown
`CVE-2020-25017`	Exploitation statusNot confirmed	FixNot confirmed	Published10/01/2020	SeverityUnknown
`CVE-2020-15104`TLS Validation Vulnerability in Envoy	Exploitation statusNot confirmed	FixYes	Published07/14/2020	SeverityMedium
`CVE-2020-12605`	Exploitation statusNot confirmed	FixNot confirmed	Published07/01/2020	SeverityUnknown
`CVE-2020-12604`	Exploitation statusNot confirmed	FixNot confirmed	Published07/01/2020	SeverityUnknown
`CVE-2020-8663`	Exploitation statusNot confirmed	FixNot confirmed	Published07/01/2020	SeverityUnknown
`CVE-2020-12603`	Exploitation statusNot confirmed	FixNot confirmed	Published07/01/2020	SeverityUnknown

100 / 110 Results

Security vulnerabilities in envoy

envoy

How many security vulnerabilities does envoy currently have?

Does the latest version of envoy have any known vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management