https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T08:07:35.032673+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-envoy-2023-27491 BIT-envoy-2023-27491 — Envoy forwards invalid Http2/Http3 downstream headers 2026-10-07T08:07:35.102559+00:00

Affected: Bitnami: envoy

Envoy is an open source edge and service proxy designed for cloud-native applications. Compliant HTTP/1 service should reject malformed request lines. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, There is a possibility that non compliant HTTP/1 service may allow malformed requests, potentially leading to a bypass of security policies. This issue is fixed in versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9.

 https://cve.radiocsirt.org/vuln/euvd-2026-214666 EUVD-2026-214666 2026-10-07T08:07:35.102621+00:00 EUVD-2026-214666 https://cve.radiocsirt.org/vuln/fkie_cve-2023-27491 fkie_cve-2023-27491 2026-10-07T08:07:35.102637+00:00

Envoy is an open source edge and service proxy designed for cloud-native applications. Compliant HTTP/1 service should reject malformed request lines. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, There is a possibility that non compliant HTTP/1 service may allow malformed requests, potentially leading to a bypass of security policies. This issue is fixed in versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9.

 https://cve.radiocsirt.org/vuln/gsd-2023-27491 gsd-2023-27491 2026-10-07T08:07:35.102661+00:00 gsd-2023-27491 https://cve.radiocsirt.org/vuln/rhsa-2023:4623 RHSA-2023:4623 — Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.2.9 security update 2026-10-07T08:07:35.102672+00:00

envoy: Client may fake the header `x-envoy-original-path` envoy: gRPC client produces invalid protobuf when an HTTP header with non-UTF8 value is received envoy: Envoy forwards invalid HTTP/2 and HTTP/3 downstream envoy: Crash when a large request body is processed in Lua filter envoy: envoy doesn't escape HTTP header values envoy: Crash when a redirect url without a state param is received in the oauth filter

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2058 WID-SEC-W-2023-2058 — Red Hat OpenShift Service Mesh und Service Mesh Containers: Mehrere Schwachstellen 2026-10-07T08:07:35.102699+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Service Mesh und Service Mesh Containers, sowie Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.