Go github.com/envoyproxy/gateway

Name: Go github.com/envoyproxy/gateway
Brand: Go

productUS

pkg:golang/github.com/envoyproxy/gateway

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical0high0medium0low

updated 2026-10-28

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-53719US	—	0.71% (54th)	—	1.8.1	2026-09-14	2 versions
CVE-2026-53716US	—	0.71% (54th)	—	1.8.1	2026-09-14	2 versions
CVE-2026-53717US	—	0.71% (54th)	—	1.8.1	2026-09-14	2 versions
CVE-2026-22771US	—	0.62% (50th)	—	1.6.2	2026-01-12	2 versions
CVE-2026-53715US	—	0.47% (40th)	—	1.8.1	2026-09-14	2 versions
CVE-2026-53713US	—	0.43% (37th)	—	1.8.1	2026-09-14	2 versions
CVE-2025-24030US	—	0.42% (36th)	—	1.2.6	2025-01-23	< 1.2.6
CVE-2026-53718US	—OT elevated	0.41% (35th)	—	1.8.1	2026-09-14	2 versions
CVE-2026-53714US	—OT elevated	0.35% (28th)	—	1.8.1	2026-09-14	2 versions
CVE-2025-25294US	—	0.29% (21st)	—	1.2.7	2025-03-06	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-789Memory Allocation with Excessive Size Value2 CVEs
CWE-117Improper Output Neutralization for Logs1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVEs
CWE-419Unprotected Primary Channel1 CVEs
CWE-476NULL Pointer Dereference1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.