GHSA-rj35-4m94-77jh
Low · 3.7CVSS
3.7
EPSS
—
Published
Dec 5, 2025
CISA due date
—
The record
Envoy forwards early CONNECT data in TCP proxy mode
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/envoyproxy/envoy | 0 | 1.33.13 |
| Go | github.com/envoyproxy/envoy | 1.34.0 | 1.34.11 |
| Go | github.com/envoyproxy/envoy | 1.35.0 | 1.35.7 |
| Go | github.com/envoyproxy/envoy | 1.36.0 | 1.36.3 |
| Bitnami | envoy | 0 | 1.33.13 |
| go | github.com/envoyproxy/envoy | 1.34.0 | 1.34.11 |
| go | github.com/envoyproxy/envoy | 1.35.0 | 1.35.7 |
| go | github.com/envoyproxy/envoy | 1.36.0 | 1.36.3 |
Related vulnerabilities
- CVE-2025-64763 Envoy forwards early CONNECT data in TCP proxy mode Same vulnerability
- GHSA-rwjg-c3h2-f57p Envoy's TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat… Also affects github.com/envoyproxy/envoy
- GHSA-mp85-7mrq-r866 Envoy crashes when JWT authentication is configured with the remote JWKS fetching Also affects github.com/envoyproxy/envoy
- CVE-2025-64527 Envoy crashes when JWT authentication is configured with the remote JWKS fetching Also affects github.com/envoyproxy/envoy
- CVE-2025-66220 Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat… Also affects github.com/envoyproxy/envoy
- CVE-2024-30255 Envoy is a cloud-native, open source edge and service proxy. Also affects envoy
- CVE-2026-113730 OGNL is an Object Graph Navigation Library for Java. CWE-693
- CVE-2026-112077 A vulnerability was detected in radareorg radare2 6.2.0/6.2.2. CWE-693