Historical version

This is version 8, as it stood on . It is not what this organization currently publishes — read the current version.

GCP-2026-067

Google Version 8 imported change

Imported from official source

Published: 2026-10-12Description Description Severity Notes A Denial-of-Service (DoS) vulnerability was discovered in Envoy Proxy when an HTTP filter (such as ext_proc with route_cache_action: RETAIN) mutates the :path header after route selection on a route configured with prefix_rewrite. For instructions and more details, see the Cloud Service Mesh security bulletin. High envoyproxy/envoy#47841

This version

Version
8 of 11
Recorded
October 28, 2026 16:00
Change
Imported change
Content hash
0db33df5f26b34916e0d69d5f0f365a2
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.