Envoy 1.37

Vulnerabilities in Envoy 1.37

34 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 03/11/2026.

• CVE-2026-111497, CVSS 4.0: 9.2, actively exploited: fixed in 1.37.8
• CVE-2026-26308, CVSS 3.1: 8.2: not affected in 1.37.11
• CVE-2026-73553, CVSS 3.1: 7.5: fixed in 1.37.6
• CVE-2026-73552, CVSS 3.1: 7.5: fixed in 1.37.6
• CVE-2026-73550, CVSS 3.1: 7.5: fixed in 1.37.6
• CVE-2026-73548, CVSS 3.1: 7.5: fixed in 1.37.6
• CVE-2026-73547, CVSS 3.1: 7.5: fixed in 1.37.6
• CVE-2026-73513, CVSS 3.1: 7.5: fixed in 1.37.6
• CVE-2026-73512, CVSS 3.1: 7.5: fixed in 1.37.6
• CVE-2026-48743, CVSS 3.1: 7.5: fixed in 1.37.5
• CVE-2026-48706, CVSS 3.1: 7.5: fixed in 1.37.5
• CVE-2026-48497, CVSS 3.1: 7.5: fixed in 1.37.5
• CVE-2026-48044, CVSS 3.1: 7.5: fixed in 1.37.5
• CVE-2026-48042, CVSS 3.1: 7.5: fixed in 1.37.5
• CVE-2026-47774, CVSS 3.1: 7.5: fixed in 1.37.3
• CVE-2026-47221, CVSS 3.1: 7.5: fixed in 1.37.5
• CVE-2026-47220, CVSS 3.1: 7.5: fixed in 1.37.5
• CVE-2026-47204, CVSS 3.1: 7.5: fixed in 1.37.5
• CVE-2026-26330, CVSS 3.1: 7.5: not affected in 1.37.11
• CVE-2026-26310, CVSS 3.1: 7.5: not affected in 1.37.11
• CVE-2026-73546, CVSS 3.1: 7.4: fixed in 1.37.6
• CVE-2026-47775, CVSS 3.1: 6.8: fixed in 1.37.3
• CVE-2026-47207, CVSS 3.1: 6.5: fixed in 1.37.5
• CVE-2026-50572, CVSS 3.1: 5.9: fixed in 1.37.6
• CVE-2026-48521, CVSS 3.1: 5.9: fixed in 1.37.6
• CVE-2026-48090, CVSS 3.1: 5.9: fixed in 1.37.5
• CVE-2026-47205, CVSS 3.1: 5.9: fixed in 1.37.5
• CVE-2026-26311, CVSS 3.1: 5.9: not affected in 1.37.11
• CVE-2026-73551, CVSS 3.1: 5.3: fixed in 1.37.6
• CVE-2026-73549, CVSS 3.1: 5.3: fixed in 1.37.6
• CVE-2026-73511, CVSS 3.1: 5.3: fixed in 1.37.6
• CVE-2026-26309, CVSS 3.1: 5.3: not affected in 1.37.11
• CVE-2026-47778, CVSS 3.1: 4.4: fixed in 1.37.5
• CVE-2026-47692, CVSS 3.1: 4.3: fixed in 1.37.5