envoy

envoy 1.36.10 · pkgs/by-name/en/envoy/package.nix

Health

Risk

risk 71 critical

+50 2 open advisories
+8 NIXPKGS-2026-2009 has a public exploit (CISA)
+4 NIXPKGS-2026-1941 has a 1% chance of exploitation in 30 days (EPSS)
+8 1.36.10 is behind upstream 1.40.0
+1 no versionCheckHook

Version

1.36.10 upstream 1.40.0

Channels

master 1.36.10 · nixos-unstable 1.36.10 · nixos-26.05 1.36.10 no channel is behind master

Hydra

succeeded 14mo ago

Advisories

NIXPKGS-2026-1941 high 7.5 EPSS 1.1% Envoy vulnerable to HTTP/2 memory exhaustion via cookie header size bypass and HPACK amplification · #532921

CVE-2026-47774

NIXPKGS-2026-2009 high 7.5 public exploit EPSS 0.6% envoy, envoy-bin: security issues < 1.36.9, < 1.38.3, < 1.37.5 · #535940

CVE-2026-47204, CVE-2026-47205, CVE-2026-47207, CVE-2026-47221, CVE-2026-47692, CVE-2026-47775, CVE-2026-47778, CVE-2026-48042, CVE-2026-48044, CVE-2026-48497, CVE-2026-48706, CVE-2026-48743

Packaging

no versionCheckHook

Packagewhat each field means

Description

Cloud-native edge and service proxy

Homepage

https://envoyproxy.io

Changelog

https://github.com/envoyproxy/envoy/releases/tag/v1.36.10

License

Apache-2.0

Platforms

2 platforms: Linux

Main program

envoy

Source provenance

not set: built from source

Outputs

out

Status

not broken, not insecure, free

Position

pkgs/by-name/en/envoy/package.nix:379

Maintainers

lukegb

Version bumps 0all open bumps

None open. Upstream has 1.40.0: how to update a package.

Pull requests 7

envoy: enable aarch64-darwin

#572537 by tvi · opened 6d ago

bazel_7: 7.6.0 -> 7.7.1

#506108 by boltzmannrain · opened 6mo ago

reference-update: updates pomerium library

#505002 by akhasanshin · opened 6mo ago

bazel_7: 7.6.0 -> 7.7.1 draft

#474010 by Aleksanaa · opened 9mo ago · checks fail

bazel_7: 7.6.0 -> 7.7.0 draft

#457326 by boltzmannrain · opened 11mo ago

buildBazelPackage: unify bazel binary across deps and build derivations draft

#390472 by samuela · opened 19mo ago · checks pass

buildBazelPackage: use same bazel for deps & build draft

#362195 by boltzmannrain · opened 22mo ago

Closed or merged in the synced window 2

[Backport release-26.05] envoy: 1.36.5 -> 1.36.10

#566231 by nixpkgs-ci · merged 3w ago

envoy: 1.36.5 -> 1.36.10

#566016 by lukegb · merged 3w ago

Issues 3

envoy, envoy-bin: security issues < 1.36.9, < 1.38.3, < 1.37.5 1.severity: security

#535940 by nixpkgs-security-tracker · opened 3mo ago · 0 comments

Build failure: envoy 2.status: stale

#475686 by DieracDelta · opened 9mo ago · 1 comments

buildBazelPackage fails on Darwin 6.topic: darwin 2.status: stale

#389886 by simonchatts · opened 19mo ago · 1 comments

Closed or merged in the synced window 1

Envoy: Segmentation fault when using %REQUESTED_SERVER_NAME% in log format 1.severity: security

#535938 by nixpkgs-security-tracker · closed 5w ago · 1 comments