Cloudanix VulnDB

GHSA-rwjg-c3h2-f57p

Medium · 5.0

CVSS

5.0

EPSS

—

Published

Dec 5, 2025

CISA due date

—

The record

Envoy's TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte

Affected packages

Ecosystem Package Introduced Fixed
Go github.com/envoyproxy/envoy 0 1.33.13
Go github.com/envoyproxy/envoy 1.34.0 1.34.11
Go github.com/envoyproxy/envoy 1.35.0 1.35.7
Go github.com/envoyproxy/envoy 1.36.0 1.36.3
Bitnami envoy 0 1.33.13
go github.com/envoyproxy/envoy 1.34.0 1.34.11
go github.com/envoyproxy/envoy 1.35.0 1.35.7
go github.com/envoyproxy/envoy 1.36.0 1.36.3

Related vulnerabilities