https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T21:54:51.247239+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-23324 CVE-2024-23324 — Envoy ext auth can be bypassed when Proxy protocol filter sets invalid UTF-8 metadata 2026-10-19T21:54:51.248486+00:00

Affected: envoyproxy envoy

Envoy is a high-performance edge/middle/service proxy. External authentication can be bypassed by downstream connections. Downstream clients can force invalid gRPC requests to be sent to ext_authz, circumventing ext_authz checks when failure_mode_allow is set to true. This issue has been addressed in released 1.29.1, 1.28.1, 1.27.3, and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.