CVE-2025-30157
1 advisory.
Go/github.com/envoyproxy/envoy CVE-2025-30157: medium 6.5, EPSS 0.44%
Envoy crashes when HTTP ext_proc processes local replies
Action: Upgrade github.com/envoyproxy/envoy to 1.30.10 or later.
go get github.com/envoyproxy/envoy@v1.30.10go get github.com/envoyproxy/envoy@v1.31.6go get github.com/envoyproxy/envoy@v1.32.4go get github.com/envoyproxy/envoy@v1.33.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.30.10 | - |
| 1.31.0 | 1.31.6 | - |
| 1.32.0 | 1.32.4 | - |
| 1.33.0 | 1.33.1 | - |
Fixed versions
| 1.30.10 | 1.31.6 | 1.32.4 | 1.33.1 |
Sources
- osv: GHSA-cf3q-gqg7-3fm9
- https://github.com/envoyproxy/envoy/security/advisories/GHSA-cf3q-gqg7-3fm9
- https://nvd.nist.gov/vuln/detail/CVE-2025-30157
- https://github.com/envoyproxy/envoy/commit/8eda1b8ef5ba8663d16a737ab99458c039a9b53c
- https://github.com/envoyproxy/envoy
CVE-2025-30157 · published · modified · JSON