envoy-bin
envoy-bin 1.39.3 · pkgs/by-name/en/envoy-bin/package.nix
Health
Risk
risk 62 critical
- +50 2 open advisories
- +8 NIXPKGS-2026-2009 has a public exploit (CISA)
- +4 NIXPKGS-2026-1941 has a 1% chance of exploitation in 30 days (EPSS)
Version
1.39.3 no newer release known to repology
Channels
Hydra
succeeded 3d ago
Advisories
NIXPKGS-2026-1941 high 7.5 EPSS 1.1% Envoy vulnerable to HTTP/2 memory exhaustion via cookie header size bypass and HPACK amplification · #532921
CVE-2026-47774
NIXPKGS-2026-2009 high 7.5 public exploit EPSS 0.6% envoy, envoy-bin: security issues < 1.36.9, < 1.38.3, < 1.37.5 · #535940
CVE-2026-47204, CVE-2026-47205, CVE-2026-47207, CVE-2026-47221, CVE-2026-47692, CVE-2026-47775, CVE-2026-47778, CVE-2026-48042, CVE-2026-48044, CVE-2026-48497, CVE-2026-48706, CVE-2026-48743
NIXPKGS-2026-2697 Multiple Envoy security vulnerabilities (<1.36.10, <1.37.6, <1.38.4, <1.39.1) fixed in master needs backport to nixos-26.05
NIXPKGS-2026-2008 Envoy: Segmentation fault when using %REQUESTED_SERVER_NAME% in log format fixed in master needs backport to nixos-26.05
NIXPKGS-2026-2007 Envoy HTTP: OAuth2 filter late async token completion after stream teardown (UAF / crash risk) fixed in master needs backport to nixos-26.05
Packaging
not read yet: the next index sweep reads it
Maintainers
Pull requests 0
None open.
Closed or merged in the synced window 3
envoy-bin: 1.39.1 -> 1.39.3
#572583 by r-ryantm · merged 3d ago
envoy-bin: 1.37.4 -> 1.37.6
#558261 by charludo · merged 5w ago
envoy-bin: 1.39.0 -> 1.39.1
#557807 by r-ryantm · merged 6w ago
Issues 1
envoy, envoy-bin: security issues < 1.36.9, < 1.38.3, < 1.37.5 1.severity: security
#535940 by nixpkgs-security-tracker · opened 3mo ago · 0 comments