Affected by GO-2026-4312 and 7 other vulnerabilities

GO-2026-4312: Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway

GO-2026-6003: Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway

GO-2026-6005: Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway

GO-2026-6006: Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway

GO-2026-6007: Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway

GO-2026-6008: Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway

GO-2026-6009: Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway

GO-2026-6011: Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway

file

package

v1.4.6 Latest Latest Go to latest Published: Nov 19, 2025 License: Apache-2.0 Imports: 33 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/envoyproxy/gateway

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
type Provider
- func New(ctx context.Context, svr *config.Server, resources *message.ProviderResources) (*Provider, error)
- func (p *Provider) Start(ctx context.Context) error
- func (p *Provider) Type() egv1a1.ProviderType
type StatusHandler
- func NewStatusHandler(log logr.Logger) *StatusHandler
- func (u *StatusHandler) Start(ctx context.Context, ready *sync.WaitGroup)
- func (u *StatusHandler) Writer() kubernetes.Updater
type StatusWriter
- func (u *StatusWriter) Send(update kubernetes.Update)

Constants ¶

View Source

const (
	GatewayDeletionOrder = 3
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Provider ¶

type Provider struct {
	// contains filtered or unexported fields
}

func New ¶

func New(ctx context.Context, svr *config.Server, resources *message.ProviderResources) (*Provider, error)

func (*Provider) Start ¶

func (p *Provider) Start(ctx context.Context) error

func (*Provider) Type ¶

func (p *Provider) Type() egv1a1.ProviderType

type StatusHandler ¶ added in v1.4.0

type StatusHandler struct {
	// contains filtered or unexported fields
}

func NewStatusHandler ¶ added in v1.4.0

func NewStatusHandler(log logr.Logger) *StatusHandler

func (*StatusHandler) Start ¶ added in v1.4.0

func (u *StatusHandler) Start(ctx context.Context, ready *sync.WaitGroup)

Start runs the goroutine to perform status writes.

func (*StatusHandler) Writer ¶ added in v1.4.0

func (u *StatusHandler) Writer() kubernetes.Updater

Writer retrieves the interface that should be used to write to the StatusHandler.

type StatusWriter ¶ added in v1.4.0

type StatusWriter struct {
	// contains filtered or unexported fields
}

StatusWriter takes status updates and sends these to the StatusHandler via a channel.

func (*StatusWriter) Send ¶ added in v1.4.0

func (u *StatusWriter) Send(update kubernetes.Update)

Send sends the given Update off to the update channel for writing by the StatusHandler.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL