envoyproxy has 32 CVEs on record between 2020 and 2026. Disclosure cadence is accelerating: 21 in the last 90 days against 1 in the 90 before. The busiest recent month was September 2026 with 20. The median CVSS is 7.4 (high), with 2 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-476 (5) and CWE-20 (4). Most affected products: envoy (22), gateway (8), github.com/envoyproxy/ai-gateway (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.4
- Publish → KEV
- —
- Last 90 days
- 21 prev 1
Products
- envoy 22
- gateway 8
- github.com/envoyproxy/ai-gateway 1
- github.com/envoyproxy/envoy 1
Worst active — by depth score
CVE-2019-9901Critical· 10.0EnvoyProxy Envoy Missing HTTP URL path normalization56CVE-2023-35945High· 7.5Envoy is a cloud-native high-performance edge/middle/service proxy54CVE-2026-73553High· 7.5Envoy is an open source edge and service proxy designed for cloud-native applications53CVE-2026-73550High· 7.5Envoy is an open source edge and service proxy designed for cloud-native applications53CVE-2026-73548High· 7.5Envoy is an open source edge and service proxy designed for cloud-native applications53
envoyproxy vulnerabilities
CVEs affecting envoyproxy, newest first. Open any entry for full detail, references, and exploit status.
32 CVEsRSS
CVE-2020-8661High· 7.5CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests.
CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests.
CVE-2020-8659High· 7.5CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small (i.e
CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small (i.e. 1 byte) chunks.