VYPR

envoy

by Envoy

Source repositories

CVEs (63)

  • CVE-2021-43826HigFeb 22, 2022
    risk 0.00cvss 7.5epss 0.01

    Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions of Envoy a crash occurs when configured for :ref:`upstream tunneling <envoy_v3_api_field_extensions.filters.network.tcp_proxy.v3.TcpProxy.tunneling_config>` and the…

  • CVE-2021-43824HigFeb 22, 2022
    risk 0.00cvss 7.5epss 0.01

    Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions a crafted request crashes Envoy when a CONNECT request is sent to JWT filter configured with regex match. This provides a denial of service attack vector. The only…

  • CVE-2021-21378HigMar 11, 2021
    risk 0.00cvss 8.2epss 0.02

    Envoy is a cloud-native high-performance edge/middle/service proxy. In Envoy version 1.17.0 an attacker can bypass authentication by presenting a JWT token with an issuer that is not in the provider list when Envoy's JWT Authentication filter is configured with the…

Page 4 of 4