{"action":"Upgrade github.com/envoyproxy/envoy to 1.30.10 or later.","affected":[{"fixed":"1.30.10","introduced":"0"},{"fixed":"1.31.6","introduced":"1.31.0"},{"fixed":"1.32.4","introduced":"1.32.0"},{"fixed":"1.33.1","introduced":"1.33.0"}],"component":"github.com/envoyproxy/envoy","cve_ids":["CVE-2025-30157"],"ecosystem":"Go","epss":0.00436,"exploited":false,"fixed_versions":["1.30.10","1.31.6","1.32.4","1.33.1"],"ghsa_id":"GHSA-cf3q-gqg7-3fm9","id":"tcs_01M5KF7636KZ811N0D8BRBES0P","modified_at":"2026-09-10T03:49:48.463519140Z","published_at":"2025-03-21T15:23:50Z","references":["https://osv.dev/vulnerability/GHSA-cf3q-gqg7-3fm9","https://github.com/envoyproxy/envoy/security/advisories/GHSA-cf3q-gqg7-3fm9","https://nvd.nist.gov/vuln/detail/CVE-2025-30157","https://github.com/envoyproxy/envoy/commit/8eda1b8ef5ba8663d16a737ab99458c039a9b53c","https://github.com/envoyproxy/envoy"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-cf3q-gqg7-3fm9","url":"https://osv.dev/vulnerability/GHSA-cf3q-gqg7-3fm9"}],"summary":"Envoy crashes when HTTP ext_proc processes local replies"}