Cloudanix VulnDB

CVE-2025-66220

Medium · 5.0

CVSS

5.0

EPSS

0.2%

Published

Dec 3, 2025

CISA due date

—

The record

Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte

Affected packages

Ecosystem Package Introduced Fixed
Go github.com/envoyproxy/envoy 0 1.33.13
Go github.com/envoyproxy/envoy 1.34.0 1.34.11
Go github.com/envoyproxy/envoy 1.35.0 1.35.7
Go github.com/envoyproxy/envoy 1.36.0 1.36.3
Bitnami envoy 0 1.33.13
go github.com/envoyproxy/envoy 1.34.0 1.34.11
go github.com/envoyproxy/envoy 1.35.0 1.35.7
go github.com/envoyproxy/envoy 1.36.0 1.36.3

Related vulnerabilities