GO-2026-4312
and 7 other vulnerabilities
GO-2026-4312 : Envoy Extension Policy lua scripts injection causes arbitrary command execution in github.com/envoyproxy/gateway
GO-2026-6003 : Envoy Gateway: xDS Control Plane Information Disclosure when operating in GatewayNamespaceMode in github.com/envoyproxy/gateway
GO-2026-6005 : Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock in github.com/envoyproxy/gateway
GO-2026-6006 : Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit in github.com/envoyproxy/gateway
GO-2026-6007 : Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway
GO-2026-6008 : Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header in github.com/envoyproxy/gateway
GO-2026-6009 : Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization in github.com/envoyproxy/gateway
GO-2026-6011 : Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure in github.com/envoyproxy/gateway
Discover Packages
github.com/envoyproxy/gateway
internal
utils
str
package
Version:
v1.6.0-rc.0
Opens a new window with list of versions in this module.
Published: Oct 27, 2025
License: Apache-2.0
Opens a new window with license information.
Imports: 1
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
¶
SanitizeLabelName replaces anything that doesn't match
client_label.LabelNameRE with an underscore.
Note: this does not handle all Prometheus label name restrictions (such as
not starting with a digit 0-9), and hence should only be used if the label
name is prefixed with a known valid string.
¶
Click to show internal directories.
Click to hide internal directories.
Affected by 
Documentation
¶
Source Files