Affected by GO-2026-4312 and 7 other vulnerabilities

GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

GO-2026-6003: Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway

GO-2026-6005: Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway

GO-2026-6006: Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway

GO-2026-6007: Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway

GO-2026-6008: Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway

GO-2026-6009: Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway

GO-2026-6011: Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway

common

package

v1.3.2 Latest Latest Go to latest Published: Mar 24, 2025 License: Apache-2.0 Imports: 4 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/envoyproxy/gateway

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
func BuildProxyArgs(infra *ir.ProxyInfra, shutdownConfig *egv1a1.ShutdownConfig, ...) ([]string, error)
func GetSdsCAConfigMapData(ca string) string
func GetSdsCertConfigMapData(tlsCert, tlsKey string) string

Constants ¶

View Source

const (
	SdsCAFilename   = "xds-trusted-ca.json"
	SdsCertFilename = "xds-certificate.json"
)

Variables ¶

This section is empty.

Functions ¶

func BuildProxyArgs ¶

func BuildProxyArgs(
	infra *ir.ProxyInfra,
	shutdownConfig *egv1a1.ShutdownConfig,
	bootstrapConfigOptions *bootstrap.RenderBootstrapConfigOptions,
	serviceNode string,
) ([]string, error)

BuildProxyArgs builds command arguments for proxy infrastructure.

func GetSdsCAConfigMapData ¶

func GetSdsCAConfigMapData(ca string) string

func GetSdsCertConfigMapData ¶

func GetSdsCertConfigMapData(tlsCert, tlsKey string) string

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL