https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 20:34:23 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-11399 bdu:2024-11399 https://cve.radiocsirt.org/vuln/bdu:2024-11399 https://cve.radiocsirt.org/vuln/bit-envoy-2024-53270 <p><strong>Affected:</strong> Bitnami: envoy</p> <p>Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions `sendOverloadError` is going to assume the active request exists when `envoy.load_shed_points.http1_server_abort_dispatch` is configured. If `active_request` is nullptr, only onMessageBeginImpl() is called. However, the `onMessageBeginImpl` will directly return ok status if the stream is already reset leading to the nullptr reference. The downstream reset can actually happen during the H/2 upstream reset. As a result envoy may crash. This issue has been addressed in releases 1.32.3, 1.31.5, 1.30.9, and 1.29.12. Users are advised to upgrade. Users unable to upgrade may disable `http1_server_abort_dispatch` load shed point and/or use a high threshold.</p> <p><strong>Affected:</strong> Bitnami: envoy</p> <p>Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions `sendOverloadError` is going to assume the active request exists when `envoy.load_shed_points.http1_server_abort_dispatch` is configured. If `active_request` is nullptr, only onMessageBeginImpl() is called. However, the `onMessageBeginImpl` will directly return ok status if the stream is already reset leading to the nullptr reference. The downstream reset can actually happen during the H/2 upstream reset. As a result envoy may crash. This issue has been addressed in releases 1.32.3, 1.31.5, 1.30.9, and 1.29.12. Users are advised to upgrade. Users unable to upgrade may disable `http1_server_abort_dispatch` load shed point and/or use a high threshold.</p> https://cve.radiocsirt.org/vuln/bit-envoy-2024-53270 https://cve.radiocsirt.org/vuln/euvd-2026-207421 EUVD-2026-207421 https://cve.radiocsirt.org/vuln/euvd-2026-207421 https://cve.radiocsirt.org/vuln/fkie_cve-2024-53270 <p>Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions `sendOverloadError` is going to assume the active request exists when `envoy.load_shed_points.http1_server_abort_dispatch` is configured. If `active_request` is nullptr, only onMessageBeginImpl() is called. However, the `onMessageBeginImpl` will directly return ok status if the stream is already reset leading to the nullptr reference. The downstream reset can actually happen during the H/2 upstream reset. As a result envoy may crash. This issue has been addressed in releases 1.32.3, 1.31.5, 1.30.9, and 1.29.12. Users are advised to upgrade. Users unable to upgrade may disable `http1_server_abort_dispatch` load shed point and/or use a high threshold.</p> <p>Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions `sendOverloadError` is going to assume the active request exists when `envoy.load_shed_points.http1_server_abort_dispatch` is configured. If `active_request` is nullptr, only onMessageBeginImpl() is called. However, the `onMessageBeginImpl` will directly return ok status if the stream is already reset leading to the nullptr reference. The downstream reset can actually happen during the H/2 upstream reset. As a result envoy may crash. This issue has been addressed in releases 1.32.3, 1.31.5, 1.30.9, and 1.29.12. Users are advised to upgrade. Users unable to upgrade may disable `http1_server_abort_dispatch` load shed point and/or use a high threshold.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-53270 https://cve.radiocsirt.org/vuln/rhsa-2025:1053 <p>golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html envoy: HTTP/1: sending overload crashes when the request is reset beforehand in envoy</p> <p>golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html envoy: HTTP/1: sending overload crashes when the request is reset beforehand in envoy</p> https://cve.radiocsirt.org/vuln/rhsa-2025:1053 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0589 <p>Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Google Cloud Platform ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Google Cloud Platform ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0589