CVE security advisories and vulnerability history for envoy by envoyproxy.
Last updated
envoyproxy envoy has 128 published CVE records since 2019, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 67 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.
How the CVSS severity of envoyproxy envoy's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
2
2 of envoyproxy envoy's CVEs are confirmed exploited in the wild.
Public exploits
67
67 of envoyproxy envoy's CVEs have a known public exploit available.
The CWE weakness categories most often found in envoyproxy envoy CVEs. Follow any weakness for its full explanation.
How many envoyproxy envoy CVEs were published each year.
Browse vulnerabilities for other products by envoyproxy.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Get an alert for each new envoyproxy envoy CVE, with AI-written analysis and remediation steps.
Common questions about envoyproxy envoy vulnerabilities.
Browse every envoyproxy envoy version named in a CVE, then pick one to see only the CVEs that affect it.
Showing the 40 most-used of 766 versions. Search to find any version.
128 CVEs
Added to CISA KEV 2026-10-27
Showing 30 of 128