Vulnerability Name CVE Severity
Envoy Proxy Improper Certificate Validation Vulnerability (CVE-2022-21656)
Envoy Proxy Improper Certificate Validation Vulnerability (CVE-2022-21657)
Envoy Proxy Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-32780)
Envoy Proxy Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-39162)
Envoy Proxy Improper Encoding or Escaping of Output Vulnerability (CVE-2023-35941)
Envoy Proxy Improper Encoding or Escaping of Output Vulnerability (CVE-2024-45808)
Envoy Proxy Improper Handling of Exceptional Conditions Vulnerability (CVE-2024-23325)
Envoy Proxy Improper Handling of Highly Compressed Data (Data Amplification) Vulnerability (CVE-2022-29225)
Envoy Proxy Improper Handling of Highly Compressed Data (Data Amplification) Vulnerability (CVE-2026-48044)
Envoy Proxy Improper Handling of Length Parameter Inconsistency Vulnerability (CVE-2026-47692)
Envoy Proxy Improper Input Validation Vulnerability (CVE-2019-9900)
Envoy Proxy Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-29492)
Envoy Proxy Improper Neutralization of Null Byte or NUL Character Vulnerability (CVE-2026-47778)
Envoy Proxy Improper Null Termination Vulnerability (CVE-2025-66220)
Envoy Proxy Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-12604)
Envoy Proxy Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2021-32781)
Envoy Proxy Incomplete Cleanup Vulnerability (CVE-2023-35945)
Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-27491)
Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-27493)
Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-35944)
Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2024-23326)
Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-48743)
Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-32777)
Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-32779)
Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-39206)
Envoy Proxy Incorrect Authorization Vulnerability (CVE-2026-26308)
Envoy Proxy Insufficient Session Expiration Vulnerability (CVE-2025-55162)
Envoy Proxy Insufficient Verification of Data Authenticity Vulnerability (CVE-2020-8660)
Envoy Proxy Integer Overflow or Wraparound Vulnerability (CVE-2021-28682)
Envoy Proxy Integer Underflow (Wrap or Wraparound) Vulnerability (CVE-2024-32975)
Envoy Proxy Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-18836)
Envoy Proxy Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2024-32976)
Envoy Proxy Memory Allocation with Excessive Size Value Vulnerability (CVE-2026-49975)
Envoy Proxy Missing Authentication for Critical Function Vulnerability (CVE-2022-29226)
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2019-18838)
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2021-28683)
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2021-43824)
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2022-29224)
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2024-23327)
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2024-45809)
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2024-53270)
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2025-62409)
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2025-64527)
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47204)
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47220)
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2026-47221)
Envoy Proxy Off-by-one Error Vulnerability (CVE-2026-26309)
Envoy Proxy Origin Validation Error Vulnerability (CVE-2020-15104)
Envoy Proxy Other Vulnerability (CVE-2020-25017)
Envoy Proxy Other Vulnerability (CVE-2024-34363)
Envoy Proxy Out-of-bounds Write Vulnerability (CVE-2019-18801)
Envoy Proxy Out-of-bounds Write Vulnerability (CVE-2024-34364)
Envoy Proxy Overly Restrictive Regular Expression Vulnerability (CVE-2025-46821)
Envoy Proxy Protection Mechanism Failure Vulnerability (CVE-2025-64763)
Envoy Proxy Reachable Assertion Vulnerability (CVE-2021-29258)
Envoy Proxy Reachable Assertion Vulnerability (CVE-2022-29228)
Envoy Proxy Reachable Assertion Vulnerability (CVE-2024-32475)
Envoy Proxy Uncontrolled Recursion Vulnerability (CVE-2022-23606)
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2019-15226)
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2020-8663)
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2020-12603)
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2020-12605)
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2024-23323)
Envoy Proxy Use After Free Vulnerability (CVE-2021-43825)
Envoy Proxy Use After Free Vulnerability (CVE-2021-43826)
Envoy Proxy Use After Free Vulnerability (CVE-2022-29227)
Envoy Proxy Use After Free Vulnerability (CVE-2023-35942)
Envoy Proxy Use After Free Vulnerability (CVE-2023-35943)
Envoy Proxy Use After Free Vulnerability (CVE-2024-23322)
Envoy Proxy Use After Free Vulnerability (CVE-2024-32974)
Envoy Proxy Use After Free Vulnerability (CVE-2024-34362)
Envoy Proxy Use After Free Vulnerability (CVE-2024-39305)
Envoy Proxy Use After Free Vulnerability (CVE-2025-54588)
Envoy Proxy Use After Free Vulnerability (CVE-2025-62504)