| Package | Affected versions | Patched versions |
|---|---|---|
| envoy | ≥ 1.13.0, < 1.13.4≥ 1.14.0, < 1.14.4≥ 1.15.0, < 1.15.1< 1.12.7 | 1.13.41.14.41.15.11.12.7 |
Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-inline header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free