https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T12:48:31.656824+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-envoy-2022-21654 BIT-envoy-2022-21654 — Incorrect configuration handling allows TLS session re-use without re-validation in Envoy 2026-10-06T12:48:31.663937+00:00

Affected: Bitnami: envoy

Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy's tls allows re-use when some cert validation settings have changed from their default configuration. The only workaround for this issue is to ensure that default tls settings are used. Users are advised to upgrade.

 https://cve.radiocsirt.org/vuln/cnvd-2022-15535 cnvd-2022-15535 2026-10-06T12:48:31.663991+00:00 cnvd-2022-15535 https://cve.radiocsirt.org/vuln/euvd-2026-234412 EUVD-2026-234412 2026-10-06T12:48:31.664009+00:00 EUVD-2026-234412 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21654 fkie_cve-2022-21654 2026-10-06T12:48:31.664020+00:00

Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy's tls allows re-use when some cert validation settings have changed from their default configuration. The only workaround for this issue is to ensure that default tls settings are used. Users are advised to upgrade.

 https://cve.radiocsirt.org/vuln/gsd-2022-21654 gsd-2022-21654 2026-10-06T12:48:31.664042+00:00 gsd-2022-21654 https://cve.radiocsirt.org/vuln/rhsa-2022:1275 RHSA-2022:1275 — Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.1.2 security update 2026-10-06T12:48:31.664053+00:00

envoy: Null pointer dereference when using JWT filter safe_regex match envoy: Use-after-free when response filters increase response data envoy: Use-after-free when tunneling TCP over HTTP envoy: Incorrect configuration handling allows mTLS session re-use without re-validation envoy: Incorrect handling of internal redirects to routes with a direct response entry envoy: Stack exhaustion when a cluster is deleted via Cluster Discovery Service istio: unauthenticated control plane denial of service attack istio: Unauthenticated control plane denial of service attack due to stack exhaustion

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0970 WID-SEC-W-2022-0970 — Red Hat OpenShift: Mehrere Schwachstellen 2026-10-06T12:48:31.664077+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen.