https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:07:38.324140+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-envoy-2021-29258 BIT-envoy-2021-29258 2026-10-03T16:07:38.401923+00:00

Affected: Bitnami: envoy

An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion.

 https://cve.radiocsirt.org/vuln/cnvd-2021-58572 cnvd-2021-58572 2026-10-03T16:07:38.401982+00:00 cnvd-2021-58572 https://cve.radiocsirt.org/vuln/euvd-2026-26255 EUVD-2026-26255 2026-10-03T16:07:38.402000+00:00 EUVD-2026-26255 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29258 fkie_cve-2021-29258 2026-10-03T16:07:38.402012+00:00

An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion.

 https://cve.radiocsirt.org/vuln/gsd-2021-29258 gsd-2021-29258 2026-10-03T16:07:38.402033+00:00 gsd-2021-29258 https://cve.radiocsirt.org/vuln/rhsa-2021:1322 RHSA-2021:1322 — Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security update 2026-10-03T16:07:38.402044+00:00

istio-pilot: requests to debug api can result in panic envoyproxy/envoy: integer overflow handling large grpc-timeouts envoyproxy/envoy: NULL pointer dereference in TLS alert code handling envoyproxy/envoy: crash with empty HTTP/2 metadata map