Defined in 4 files
Last patched
decodeHeaders in envoyproxy/envoy was changed by 5 published CVE fixes between 2019 and 2026, in 6 distinct patches that added or removed 57 lines in total.
The name occurs in 4 files: source/extensions/filters/http/oauth2/filter.cc, source/extensions/filters/http/rbac/rbac_filter.cc, source/common/http/conn_manager_impl.cc, source/common/router/upstream_codec_filter.cc.
envoyproxy/envoy has 44 CVEs with a located fix in total, so 11% of them touched this function.
Every published CVE whose fix changed decodeHeaders, newest first, with the lines each fix touched.
CVE-2026-73548 · source/common/router/upstream_codec_filter.cc · lines 94–95 · +2 −0
CVE-2023-44487 · source/common/http/conn_manager_impl.cc · lines 1420–1425 · +6 −1
CVE-2022-29226 · source/extensions/filters/http/oauth2/filter.cc · lines 214–272 · +5 −11 in 2 hunks
CVE-2022-29228 · source/extensions/filters/http/oauth2/filter.cc · lines 214–272 · +5 −11 in 2 hunks
CVE-2019-15226 · source/common/http/conn_manager_impl.cc · line 734 · +0 −8
CVE-2019-15226 · source/extensions/filters/http/rbac/rbac_filter.cc · lines 79–115 · +8 −0 in 2 hunks
Get an alert when the next CVE fix lands in envoyproxy/envoy, with the patched functions.
Monitor envoy CVEsFunctions in the same files that CVE fixes also changed.
Functions in envoyproxy/envoy changed by the most CVE fixes.
Common questions about CVE fixes to decodeHeaders.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
