Affected by GO-2025-3418 and 9 other vulnerabilities

GO-2025-3418: Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

GO-2025-3504: Envoy Gateway Log Injection Vulnerability in github.com/envoyproxy/gateway

GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

GO-2026-6003: Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway

GO-2026-6005: Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway

GO-2026-6006: Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway

GO-2026-6007: Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway

GO-2026-6008: Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway

GO-2026-6009: Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway

GO-2026-6011: Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway

runner

package

v0.3.0 Latest Latest Go to latest Published: Feb 10, 2023 License: Apache-2.0 Imports: 22 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/envoyproxy/gateway

Links

Documentation ¶

Index ¶

Constants
type Config
type Runner
- func New(cfg *Config) *Runner
- func (r *Runner) Name() string
- func (r *Runner) Start(ctx context.Context) error

Constants ¶

View Source

const (
	// XdsServerAddress is the listening address of the xds-server.
	XdsServerAddress = "0.0.0.0"
	// XdsServerPort is the listening port of the xds-server.
	XdsServerPort = 18000
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Config ¶

type Config struct {
	config.Server
	Xds *message.Xds
	// contains filtered or unexported fields
}

type Runner ¶

type Runner struct {
	Config
}

func New ¶

func New(cfg *Config) *Runner

func (*Runner) Name ¶

func (r *Runner) Name() string

func (*Runner) Start ¶

func (r *Runner) Start(ctx context.Context) error

Start starts the xds-server runner

Source Files ¶

View all Source files

runner.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL