Affected by GO-2025-3418 and 1 other vulnerabilities

GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

gateway

module

v0.3.0-rc.1 Latest Latest Go to latest Published: Feb 3, 2023 License: Apache-2.0

Details

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway.

Slack: Join the Envoy Slack workspace if you're not already a member. Otherwise, use the Envoy Gateway channel to start collaborating with the community.

The Envoy Gateway team meets every Tuesday and Thursday. Refer to the meeting details for additional information.

Path	Synopsis
api
config/v1alpha1 Package v1alpha1 contains API Schema definitions for the config v1alpha1 API group.	Package v1alpha1 contains API Schema definitions for the config v1alpha1 API group.
config/v1alpha1/validation
v1alpha1 Package v1alpha1 contains API Schema definitions for the gateway.envoyproxy.io API group.	Package v1alpha1 contains API Schema definitions for the gateway.envoyproxy.io API group.
v1alpha1/validation
cmd
envoy-gateway command
internal
cmd
cmd/version
crypto
envoygateway
envoygateway/config
gatewayapi
gatewayapi/runner
globalratelimit/runner
infrastructure
infrastructure/kubernetes
infrastructure/runner
ir
log
message
provider/kubernetes
provider/kubernetes/test
provider/runner
provider/utils
status
utils/env
utils/slice
xds/cache
xds/server/runner
xds/translator
xds/translator/runner
xds/types