Skip to content
Sign in
5.4 Medium

CVE-2023-27491 Envoy is an open source edge and service proxy designed for cloud-native applications

Description

Envoy is an open source edge and service proxy designed for cloud-native applications. Compliant HTTP/1 service should reject malformed request lines. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, There is a possibility that non compliant HTTP/1 service may allow malformed requests, potentially leading to a bypass of security policies. This issue is fixed in versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9.

Affected products and versions

Product Affected versions Fixed in
envoy 1.25 1.25.0 → < 1.25.3 1.25.3
envoy 1.24 1.24.0 → < 1.24.4 1.24.4
envoy 1.23 1.23.0 → < 1.23.6 1.23.6
envoy 1.22 earliest → < 1.22.9 1.22.9

Other CVEs of envoy

The 98 CVEs of envoy →
CVE-2026-73511 Envoy is an open source edge and service proxy designed for cloud-native applications 5.3 Medium CVE-2026-73553 Envoy is an open source edge and service proxy designed for cloud-native applications 7.5 High CVE-2026-73551 Envoy is an open source edge and service proxy designed for cloud-native applications 5.3 Medium CVE-2026-73546 Envoy is an open source edge and service proxy designed for cloud-native applications 7.4 High
Track this CVE