Cloudanix VulnDB

CVE-2025-64763

Low · 3.7

Envoy forwards early CONNECT data in TCP proxy mode

CVSS

3.7

EPSS

0.3%

Published

Dec 5, 2025

CISA due date

—

The record

Forwarding of early CONNECT data in TCP proxy mode.

Affected packages

Ecosystem Package Introduced Fixed
Go github.com/envoyproxy/envoy 0 1.33.13
Go github.com/envoyproxy/envoy 1.34.0 1.34.11
Go github.com/envoyproxy/envoy 1.35.0 1.35.7
Go github.com/envoyproxy/envoy 1.36.0 1.36.3
Bitnami envoy 0 1.33.13
go github.com/envoyproxy/envoy 1.34.0 1.34.11
go github.com/envoyproxy/envoy 1.35.0 1.35.7
go github.com/envoyproxy/envoy 1.36.0 1.36.3

Related vulnerabilities