- How many CVEs does envoyproxy have?
- envoyproxy has 117 published CVE records since 2019, including 33 in the last two years.
- How many envoyproxy CVEs are in CISA KEV?
- Yes — 1 of envoyproxy's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which envoyproxy products have the most CVEs?
- The envoyproxy products with the most published CVEs are envoy, github.com/envoyproxy/envoy, gateway, github.com/envoyproxy/gateway, envoy-setec.
- What are the most common weakness types in envoyproxy CVEs?
- envoyproxy's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-20 (Improper Input Validation), CWE-476 (NULL Pointer Dereference), CWE-400 (Uncontrolled Resource Consumption).
- Are there public exploits for envoyproxy vulnerabilities?
- Yes — 34 of envoyproxy's CVEs have a known public exploit.
- How many critical envoyproxy vulnerabilities are there?
- envoyproxy has 11 critical and 78 high-severity CVEs.
- What is the average severity of envoyproxy CVEs?
- The average CVSS base score across envoyproxy's scored CVEs is 7.4.