GCP-2026-067
Imported from official source
Published: 2026-10-12Description Description Severity Notes A Denial-of-Service (DoS) vulnerability was discovered in Envoy Proxy when an HTTP filter (such as ext_proc with route_cache_action: RETAIN) mutates the :path header after route selection on a route configured with prefix_rewrite. For instructions and more details, see the Cloud Service Mesh security bulletin. High envoyproxy/envoy#47841
This version
- Version
- 3 of 11
- Recorded
- October 20, 2026 02:01
- Change
- Imported change
- Content hash
a81eb82e7b6a158c67f92b62625e1a54- All versions
- Revision history