https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:29:22.921914+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-66220 CVE-2025-66220 — Envoy’s TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an em… 2026-10-06T19:29:22.941518+00:00

Affected: envoyproxy envoy

Envoy is a high-performance edge/middle/service proxy. In 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, Envoy’s mTLS certificate matcher for match_typed_subject_alt_names may incorrectly treat certificates containing an embedded null byte (\0) inside an OTHERNAME SAN value as valid matches.