# Envoy changelog

> A cloud-native high-performance edge and service proxy.

- Vendor: CNCF
- Category: Developer Tools
- Official site: https://www.envoyproxy.io
- Tracked by: What's New (https://whatsnew.fyi/product/envoy)
- Harvested from: GitHub (envoyproxy/envoy)
- Entries below: 10 (newest first)

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

## Releases

### v1.39.0

- Date: 2026-07-14
- Version: v1.39.0
- Original notes: https://github.com/envoyproxy/envoy/releases/tag/v1.39.0
- Permalink: https://whatsnew.fyi/product/envoy/releases/v1.39.0

- **changed** — Envoy now uses Bazel 8, requiring --enable_workspace and --noenable_bzlmod flags in .bazelrc
- **removed** — Intel DLB connection balancer (envoy.network.connection_balance.dlb) is disabled for all builds due to a broken source archive
- **deprecated** — enforce_rsa_key_usage is deprecated and ignored; Envoy now always enforces the certificate keyUsage extension
- **changed** — TLS inspector validates client TLS versions to be between TLS 1.0 and TLS 1.3
- **changed** — OpenTelemetry tracer now honors Envoy's request-entry sampling decision including overall_sampling, which may reduce exported spans
- **security** — HTTP/2 now counts uncompressed cookies toward header-size and header-count limits (CVE-2026-47774) and strengthens PRIORITY/WINDOW_UPDATE flood protection
- **security** — HTTP/2 adds configurable nghttp2 RST_STREAM rate limits
- **security** — HTTP/3 fixes QPACK blocked-decoding denial of service (GHSA-p7c7-7c47-pwch)
- **security** — HTTP/3 fixes inconsistent headers-only content-length handling (CVE-2026-48743)
- **security** — Added security fixes for ext_authz (CVE-2026-47205), ext_proc (CVE-2026-47207), gRPC stats (CVE-2026-47204), internal redirects (CVE-2026-47221), and OAuth2 lifecycle handling (CVE-2026-48090)
- **security** — OAuth2 adds AES-256-GCM cookie encryption to address CVE-2026-47775 with opt-in migration via oauth2_use_gcm_encryption flag
- **security** — Fixed DNS query validation (CVE-2026-48497), JSON nesting limits (CVE-2026-48042), PROXY protocol TLV smuggling (CVE-2026-47692), formatter crashes (CVE-2026-47220), TCP StatsD overflow (CVE-2026-48706), TLS SAN NUL handling (CVE-2026-47778), and Zstd decompression memory exhaustion (CVE-2026-48044)
- **added** — New upstream RBAC and dynamic-forward-proxy resolved-address filtering provide CIDR-based protection against SSRF after DNS resolution
- **added** — Dynamic modules gain new extension points for access-log/header formatters, downstream and upstream transport sockets, active health checkers, and stats sinks
- **added** — Cluster load balancers can read host stats, read and write dynamic metadata and filter state, and publish main-thread state to worker-local slots
- **added** — Dynamic modules can emit metrics from configuration and background contexts with server-wide counters tagged by extension instance
- **added** — Wuffs-backed streaming JSON parser added for MCP, A2A, OpenAI, Anthropic, and related protocols with bounded field capture and duplicate-key detection
- **added** — New HTTP filters provide weighted bandwidth sharing and selectable sub-filter chains with per-route configuration

##### Summary of changes

##### Breaking changes

- **build**: Envoy now uses Bazel 8. Because Envoy still uses WORKSPACE mode, `--enable_workspace` and `--noenable_bzlmod` are required and have been added to `.bazelrc`; external-repository runfiles now appear directly under the runfiles root.
- **build**: the Intel DLB connection balancer (`envoy.network.connection_balance.dlb`) is disabled for all builds due to a broken source archive.
- **TLS**: `enforce_rsa_key_usage` is deprecated and ignored; Envoy now always enforces the certificate `keyUsage` extension.
- **TLS inspector**: client TLS versions are validated and must be between TLS 1.0 and TLS 1.3 (revertible via `envoy.reloadable_features.tls_inspector_enforce_client_tls_version`).
- **OpenTelemetry tracing**: the tracer now honors Envoy's request-entry sampling decision, including `overall_sampling`, even when propagated trace context or the configured sampler requests sampling. This may reduce exported spans.

###### Security
- HTTP/2 now counts uncompressed cookies toward header-size and header-count limits (**CVE-2026-47774**), strengthens PRIORITY/WINDOW_UPDATE flood protection, and adds configurable nghttp2 RST_STREAM rate limits.
- HTTP/3 fixes cover QPACK blocked-decoding denial of service (**GHSA-p7c7-7c47-pwch**) and inconsistent headers-only `content-length` handling (**CVE-2026-48743**).
- Security fixes were added for ext_authz (**CVE-2026-47205**), ext_proc (**CVE-2026-47207**), gRPC stats (**CVE-2026-47204**), internal redirects (**CVE-2026-47221**), and OAuth2 lifecycle handling (**CVE-2026-48090**).
- OAuth2 adds AES-256-GCM cookie encryption to address **CVE-2026-47775**. Migration is opt-in: enable `oauth2_use_gcm_encryption`, monitor `oauth_legacy_cbc_decrypt`, then disable `oauth2_legacy_cbc_decrypt_compat`.
- Additional fixes cover DNS query validation (**CVE-2026-48497**), JSON nesting limits (**CVE-2026-48042**), PROXY protocol TLV smuggling (**CVE-2026-47692**), formatter crashes (**CVE-2026-47220**), TCP StatsD overflow (**CVE-2026-48706**), TLS SAN NUL handling (**CVE-2026-47778**), and Zstd decompression memory exhaustion (**CVE-2026-48044**).
- New upstream RBAC and dynamic-forward-proxy resolved-address filtering provide CIDR-based protection against SSRF after DNS resolution and host selection.

###### Dynamic modules
- New extension points: access-log/header formatters, downstream and upstream transport sockets, active health checkers, and stats sinks.
- Cluster load balancers can read host stats, read and write dynamic metadata and filter state, and publish main-thread state to worker-local slots.
- Modules can emit metrics from configuration and background contexts; loading and initialization failures now expose server-wide counters tagged by extension instance.
- Added validation-mode detection, network/listener attribute access, batched header and metadata APIs, effective log-level access, and zero-copy borrowed buffers in the Rust SDK.
- Fixed listener HTTP-callout crashes, watermark initialization, streaming-response re-entry, independent decode/encode continuation, CatchUnwind re-entry, `Struct` configuration handling, and HTTP/TCP bridge buffer overflow with more than 64 slices.

###### MCP (Model Context Protocol) and AI protocols
- Added a Wuffs-backed streaming JSON parser for MCP, A2A, OpenAI, Anthropic, and related protocols, with bounded field capture, incremental parsing, no DOM allocation, and duplicate-key detection.
- MCP filtering now exposes processing status, supports configurable duplicate-key rejection, and improves oversized-body behavior for pass-through and rejection modes.
- MCP router adds elicitation and server-to-client request routing, plus lazy per-backend initialization.
- MCP JSON REST Bridge adds per-route tool configuration and locally generated `tools/list` responses.

###### HTTP, routing and protocol
- New HTTP filters provide weighted bandwidth sharing and selectable

_[Truncated at 4000 characters — full notes: https://github.com/envoyproxy/envoy/releases/tag/v1.39.0]_

### v1.38.3

- Date: 2026-06-23
- Version: v1.38.3
- Original notes: https://github.com/envoyproxy/envoy/releases/tag/v1.38.3
- Permalink: https://whatsnew.fyi/product/envoy/releases/v1.38.3

- **security** — Fixed authz per route crash
- **security** — Fixed ext_proc response in one gRPC message
- **security** — Fixed router internal redirects crash
- **security** — Fixed REQUESTED_SERVER_NAME crash
- **security** — Fixed OAuth2 code verifier padding oracle
- **security** — Fixed zstd RLE zip bomb
- **security** — Fixed grpc_stats filter segfault on Connect protocol requests to direct_response routes
- **security** — Fixed PROXY Protocol v2 header generator emits skipped TLVs, causing 65 KB attacker-controlled spillover into the upstream application stream
- **security** — Fixed embedded NUL in TLS SAN truncation, auth bypass
- **security** — Fixed stack overflow in destructor of highly nested JSON
- **security** — Fixed OAuth2 filter late async token completion after stream teardown results in UAF/crash risk
- **security** — Fixed abnormal process termination in DNS UDP filter
- **security** — Fixed HTTP/3 to HTTP/1 request smuggling via headers-only request with nonzero Content-Length
- **security** — Fixed Envoy heap buffer overflow in TcpStatsdSink
- **security** — Fixed denial-of-service attack against the HTTP/3 stack via QPACK blocked decoding
- **security** — Bumped com_github_wasmtime to resolve CVE-2026-47261
- **removed** — Disabled the contrib extension envoy.network.connection_balance.dlb (Intel DLB connection balancer) at the Bazel layer for all builds and platforms
- **changed** — Disabled runtime guard envoy.reloadable_features.tls_certificate_compression_brotli by default, retaining zlib-only certificate compression for QUIC and disabling certificate compression for TCP TLS

**Summary of changes**:

* Security fixes:
  - [CVE-2026-47205](https://github.com/envoyproxy/envoy/security/advisories/GHSA-mvh9-767w-x47j): Authz per route crash
  - [CVE-2026-47207](https://github.com/envoyproxy/envoy/security/advisories/GHSA-68cv-hq5f-g6xv): ext_proc response in one gRPC message
  - [CVE-2026-47221](https://github.com/envoyproxy/envoy/security/advisories/GHSA-rcff-gw58-pjpr): router internal redirects crash
  - [CVE-2026-47220](https://github.com/envoyproxy/envoy/security/advisories/GHSA-j9wh-4qfm-wf2v): REQUESTED_SERVER_NAME crash
  - [CVE-2026-47775](https://github.com/envoyproxy/envoy/security/advisories/GHSA-396h-jpq4-vc7p): OAuth2 code verifier padding oracle
  - [CVE-2026-48044](https://github.com/envoyproxy/envoy/security/advisories/GHSA-m3p9-47wh-88wg): zstd RLE zip bomb
  - [CVE-2026-47204](https://github.com/envoyproxy/envoy/security/advisories/GHSA-3jxh-8p6x-7pf6): grpc_stats filter segfault on Connect protocol requests to direct_response routes
  - [CVE-2026-47692](https://github.com/envoyproxy/envoy/security/advisories/GHSA-wh36-hm39-mm3r): PROXY Protocol v2 header generator emits "skipped" TLVs, causing 65 KB attacker-controlled spillover into the upstream application stream
  - [CVE-2026-47778](https://github.com/envoyproxy/envoy/security/advisories/GHSA-f8x4-rw5x-f3r7): Embedded NUL in TLS SAN Truncation, Auth Bypass
  - [CVE-2026-48042](https://github.com/envoyproxy/envoy/security/advisories/GHSA-f24p-rxw2-g6pv): Stack overflow in destructor of highly nested JSON
  - [CVE-2026-48090](https://github.com/envoyproxy/envoy/security/advisories/GHSA-3cj2-c63f-q26f): OAuth2 filter late async token completion after stream teardown results in UAF/crash risk
  - [CVE-2026-48497](https://github.com/envoyproxy/envoy/security/advisories/GHSA-j6g2-wf95-q66q): Abnormal process termination in DNS UDP filter
  - [CVE-2026-48743](https://github.com/envoyproxy/envoy/security/advisories/GHSA-8phg-2h2q-jgxf): HTTP/3 to HTTP/1 request smuggling via headers-only request with nonzero Content-Length
  - [CVE-2026-48706](https://github.com/envoyproxy/envoy/security/advisories/GHSA-7q3f-gwg7-j8g4): Envoy Heap Buffer Overflow in TcpStatsdSink
  - [GHSA-p7c7-7c47-pwch](https://github.com/envoyproxy/envoy/security/advisories/GHSA-p7c7-7c47-pwch):  Denial-of-Service Attack Against the HTTP/3 Stack via QPACK Blocked Decoding

* Upstream security fixes:
  - CVE-2026-47261: wasm: bumped ``com_github_wasmtime`` to resolve CVE-2026-47261.

* Behavior changes:
  - build: disabled the contrib extension ``envoy.network.connection_balance.dlb`` (Intel DLB connection balancer) at the Bazel layer for all builds and platforms due to a breakage at the source archive. See https://github.com/envoyproxy/envoy/issues/45491 for local workarounds.

* Minor behavior changes:
  - tls: runtime guard ``envoy.reloadable_features.tls_certificate_compression_brotli`` is now disabled by default. When disabled, QUIC retains zlib-only certificate compression and TCP TLS performs no certificate compression. It can be re-enabled by setting the runtime guard to ``true``.

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.38.3
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.38.3/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.38.3/version_history/v1.38/v1.38.3
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.38.2...v1.38.3

Signed-off-by: Greg Greenway <ggreenway@apple.com>
Signed-off-by: Jonh Wendell <jonh.wendell@redhat.com>
Signed-off-by: Kateryna Nezdolii [kateryna.nezdolii@gmail.com](mailto:kateryna.nezdolii@gmail.com)
Signed-off-by: Ryan Northey [ryan@synca.io](mailto:ryan@synca.io)
Signed-off-by: Boteng Yao [boteng@google.com](mailto:boteng@google.com)

### v1.37.5

- Date: 2026-06-23
- Version: v1.37.5
- Original notes: https://github.com/envoyproxy/envoy/releases/tag/v1.37.5
- Permalink: https://whatsnew.fyi/product/envoy/releases/v1.37.5

- **security** — Fixed authz per route crash
- **security** — Fixed ext_proc response in one gRPC message
- **security** — Fixed router internal redirects crash
- **security** — Fixed REQUESTED_SERVER_NAME crash
- **security** — Fixed OAuth2 code verifier padding oracle
- **security** — Fixed zstd RLE zip bomb
- **security** — Fixed grpc_stats filter segfault on Connect protocol requests to direct_response routes
- **security** — Fixed PROXY Protocol v2 header generator emitting skipped TLVs causing 65 KB attacker-controlled spillover into the upstream application stream
- **security** — Fixed embedded NUL in TLS SAN truncation auth bypass
- **security** — Fixed stack overflow in destructor of highly nested JSON
- **security** — Fixed OAuth2 filter late async token completion after stream teardown results in UAF/crash risk
- **security** — Fixed abnormal process termination in DNS UDP filter
- **security** — Fixed HTTP/3 to HTTP/1 request smuggling via headers-only request with nonzero Content-Length
- **security** — Fixed heap buffer overflow in TcpStatsdSink
- **security** — Fixed denial-of-service attack against the HTTP/3 stack via QPACK blocked decoding
- **security** — Bumped com_github_wasmtime to resolve CVE-2026-47261
- **changed** — Disabled the contrib extension envoy.network.connection_balance.dlb (Intel DLB connection balancer) at the Bazel layer for all builds and platforms

**Summary of changes**:

* Security fixes:
  - [CVE-2026-47205](https://github.com/envoyproxy/envoy/security/advisories/GHSA-mvh9-767w-x47j):Authz per route crash
  - [CVE-2026-47207](https://github.com/envoyproxy/envoy/security/advisories/GHSA-68cv-hq5f-g6xv): ext_proc response in one gRPC message
  - [CVE-2026-47221](https://github.com/envoyproxy/envoy/security/advisories/GHSA-rcff-gw58-pjpr): router internal redirects crash
  - [CVE-2026-47220](https://github.com/envoyproxy/envoy/security/advisories/GHSA-j9wh-4qfm-wf2v): REQUESTED_SERVER_NAME crash
  - [CVE-2026-47775](https://github.com/envoyproxy/envoy/security/advisories/GHSA-396h-jpq4-vc7p): OAuth2 code verifier padding oracle
  - [CVE-2026-48044](https://github.com/envoyproxy/envoy/security/advisories/GHSA-m3p9-47wh-88wg): zstd RLE zip bomb
  - [CVE-2026-47204](https://github.com/envoyproxy/envoy/security/advisories/GHSA-3jxh-8p6x-7pf6): grpc_stats filter segfault on Connect protocol requests to direct_response routes
  - [CVE-2026-47692](https://github.com/envoyproxy/envoy/security/advisories/GHSA-wh36-hm39-mm3r): PROXY Protocol v2 header generator emits "skipped" TLVs, causing 65 KB attacker-controlled spillover into the upstream application stream
  - [CVE-2026-47778](https://github.com/envoyproxy/envoy/security/advisories/GHSA-f8x4-rw5x-f3r7): Embedded NUL in TLS SAN Truncation, Auth Bypass
  - [CVE-2026-48042](https://github.com/envoyproxy/envoy/security/advisories/GHSA-f24p-rxw2-g6pv): Stack overflow in destructor of highly nested JSON
  - [CVE-2026-48090](https://github.com/envoyproxy/envoy/security/advisories/GHSA-3cj2-c63f-q26f): OAuth2 filter late async token completion after stream teardown results in UAF/crash risk
  - [CVE-2026-48497](https://github.com/envoyproxy/envoy/security/advisories/GHSA-j6g2-wf95-q66q): Abnormal process termination in DNS UDP filter
  - [CVE-2026-48743](https://github.com/envoyproxy/envoy/security/advisories/GHSA-8phg-2h2q-jgxf): HTTP/3 to HTTP/1 request smuggling via headers-only request with nonzero Content-Length
  - [CVE-2026-48706](https://github.com/envoyproxy/envoy/security/advisories/GHSA-7q3f-gwg7-j8g4): Envoy Heap Buffer Overflow in TcpStatsdSink
  - [GHSA-p7c7-7c47-pwch](https://github.com/envoyproxy/envoy/security/advisories/GHSA-p7c7-7c47-pwch):  Denial-of-Service Attack Against the HTTP/3 Stack via QPACK Blocked Decoding

* Upstream security fixes:
  - CVE-2026-47261: wasm: bumped ``com_github_wasmtime`` to resolve CVE-2026-47261.

* Behavior changes:
  - build: disabled the contrib extension ``envoy.network.connection_balance.dlb`` (Intel DLB connection balancer) at the Bazel layer for all builds and platforms due to a breakage at the source archive. See https://github.com/envoyproxy/envoy/issues/45491 for local workarounds.

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.37.5
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.37.5/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.37.5/version_history/v1.37/v1.37.5
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.37.4...v1.37.5

Signed-off-by: Greg Greenway <ggreenway@apple.com>
Signed-off-by: Jonh Wendell <jonh.wendell@redhat.com>
Signed-off-by: Kateryna Nezdolii [kateryna.nezdolii@gmail.com](mailto:kateryna.nezdolii@gmail.com)
Signed-off-by: Ryan Northey [ryan@synca.io](mailto:ryan@synca.io)
Signed-off-by: Boteng Yao [boteng@google.com](mailto:boteng@google.com)

### v1.36.9

- Date: 2026-06-23
- Version: v1.36.9
- Original notes: https://github.com/envoyproxy/envoy/releases/tag/v1.36.9
- Permalink: https://whatsnew.fyi/product/envoy/releases/v1.36.9

- **security** — Fixed CVE-2026-47205: authz per route crash
- **security** — Fixed CVE-2026-47207: ext_proc response in one gRPC message
- **security** — Fixed CVE-2026-47221: router internal redirects crash
- **security** — Fixed CVE-2026-47775: OAuth2 code verifier padding oracle
- **security** — Fixed CVE-2026-48044: zstd RLE zip bomb
- **security** — Fixed CVE-2026-47204: grpc_stats filter segfault on Connect protocol requests to direct_response routes
- **security** — Fixed CVE-2026-47692: PROXY Protocol v2 header generator emits skipped TLVs, causing 65 KB attacker-controlled spillover into the upstream application stream
- **security** — Fixed CVE-2026-47778: embedded NUL in TLS SAN truncation causing authentication bypass
- **security** — Fixed CVE-2026-48042: stack overflow in destructor of highly nested JSON
- **security** — Fixed CVE-2026-48090: OAuth2 filter late async token completion after stream teardown results in use-after-free or crash risk
- **security** — Fixed CVE-2026-48497: abnormal process termination in DNS UDP filter
- **security** — Fixed CVE-2026-48743: HTTP/3 to HTTP/1 request smuggling via headers-only request with nonzero Content-Length
- **security** — Fixed CVE-2026-48706: heap buffer overflow in TcpStatsdSink
- **security** — Fixed GHSA-p7c7-7c47-pwch: denial-of-service attack against the HTTP/3 stack via QPACK blocked decoding
- **security** — Fixed CVE-2026-47261: bumped com_github_wasmtime to resolve wasm vulnerability
- **changed** — Disabled the contrib extension envoy.network.connection_balance.dlb (Intel DLB connection balancer) at the Bazel layer for all builds and platforms due to breakage at the source archive

**Summary of changes**:

* Upstream security fixes:
  - [CVE-2026-47205](https://github.com/envoyproxy/envoy/security/advisories/GHSA-mvh9-767w-x47j):Authz per route crash
  - [CVE-2026-47207](https://github.com/envoyproxy/envoy/security/advisories/GHSA-68cv-hq5f-g6xv): ext_proc response in one gRPC message
  - [CVE-2026-47221](https://github.com/envoyproxy/envoy/security/advisories/GHSA-rcff-gw58-pjpr): router internal redirects crash
  - [CVE-2026-47775](https://github.com/envoyproxy/envoy/security/advisories/GHSA-396h-jpq4-vc7p): OAuth2 code verifier padding oracle
  - [CVE-2026-48044](https://github.com/envoyproxy/envoy/security/advisories/GHSA-m3p9-47wh-88wg): zstd RLE zip bomb
  - [CVE-2026-47204](https://github.com/envoyproxy/envoy/security/advisories/GHSA-3jxh-8p6x-7pf6): grpc_stats filter segfault on Connect protocol requests to direct_response routes
  - [CVE-2026-47692](https://github.com/envoyproxy/envoy/security/advisories/GHSA-wh36-hm39-mm3r): PROXY Protocol v2 header generator emits "skipped" TLVs, causing 65 KB attacker-controlled spillover into the upstream application stream
  - [CVE-2026-47778](https://github.com/envoyproxy/envoy/security/advisories/GHSA-f8x4-rw5x-f3r7): Embedded NUL in TLS SAN Truncation, Auth Bypass
  - [CVE-2026-48042](https://github.com/envoyproxy/envoy/security/advisories/GHSA-f24p-rxw2-g6pv): Stack overflow in destructor of highly nested JSON
  - [CVE-2026-48090](https://github.com/envoyproxy/envoy/security/advisories/GHSA-3cj2-c63f-q26f): OAuth2 filter late async token completion after stream teardown results in UAF/crash risk
  - [CVE-2026-48497](https://github.com/envoyproxy/envoy/security/advisories/GHSA-j6g2-wf95-q66q): Abnormal process termination in DNS UDP filter
  - [CVE-2026-48743](https://github.com/envoyproxy/envoy/security/advisories/GHSA-8phg-2h2q-jgxf): HTTP/3 to HTTP/1 request smuggling via headers-only request with nonzero Content-Length
  - [CVE-2026-48706](https://github.com/envoyproxy/envoy/security/advisories/GHSA-7q3f-gwg7-j8g4): Envoy Heap Buffer Overflow in TcpStatsdSink
  - [GHSA-p7c7-7c47-pwch](https://github.com/envoyproxy/envoy/security/advisories/GHSA-p7c7-7c47-pwch): Denial-of-Service Attack Against the HTTP/3 Stack via QPACK Blocked Decoding

* Upstream security fixes:
  - CVE-2026-47261: wasm: bumped `com_github_wasmtime` to resolve CVE-2026-47261.

* Behavior changes:
  - build: disabled the contrib extension `envoy.network.connection_balance.dlb` (Intel DLB connection balancer) at the Bazel layer for all builds and platforms due to a breakage at the source archive. See https://github.com/envoyproxy/envoy/issues/45491 for local workarounds.

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.36.9
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.36.9/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.36.9/version_history/v1.36/v1.36.9
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.36.8...v1.36.9

Signed-off-by: Greg Greenway <ggreenway@apple.com>
Signed-off-by: Jonh Wendell <jonh.wendell@redhat.com>
Signed-off-by: Kateryna Nezdolii [kateryna.nezdolii@gmail.com](mailto:kateryna.nezdolii@gmail.com)
Signed-off-by: Ryan Northey [ryan@synca.io](mailto:ryan@synca.io)
Signed-off-by: Boteng Yao [boteng@google.com](mailto:boteng@google.com)

### v1.35.13

- Date: 2026-06-23
- Version: v1.35.13
- Original notes: https://github.com/envoyproxy/envoy/releases/tag/v1.35.13
- Permalink: https://whatsnew.fyi/product/envoy/releases/v1.35.13

- **security** — Fixed ext_proc response handling in single gRPC message
- **security** — Fixed router internal redirects crash
- **security** — Fixed OAuth2 code verifier padding oracle vulnerability
- **security** — Fixed zstd RLE zip bomb vulnerability
- **security** — Fixed grpc_stats filter segfault on Connect protocol requests to direct_response routes
- **security** — Fixed PROXY Protocol v2 header generator emitting skipped TLVs causing upstream application stream spillover
- **security** — Fixed embedded NUL in TLS SAN truncation auth bypass
- **security** — Fixed stack overflow in destructor of highly nested JSON
- **security** — Fixed OAuth2 filter late async token completion after stream teardown resulting in UAF/crash risk
- **security** — Fixed DNS filter abnormal process termination on long query name
- **security** — Fixed HTTP/3 headers-only request/response content-length validation
- **security** — Fixed TcpStatsdSync buffer overflow with large stats name
- **security** — Fixed denial-of-service attack against HTTP/3 stack via QPACK blocked decoding
- **security** — Bumped com_github_wasmtime to resolve CVE-2026-47261
- **changed** — Disabled the contrib extension envoy.network.connection_balance.dlb (Intel DLB connection balancer) at the Bazel layer for all builds and platforms due to source archive breakage

**Summary of changes**:

* Security fixes:
  - [CVE-2026-47207](https://github.com/envoyproxy/envoy/security/advisories/GHSA-68cv-hq5f-g6xv): ext_proc response in one gRPC message
  - [CVE-2026-47221](https://github.com/envoyproxy/envoy/security/advisories/GHSA-rcff-gw58-pjpr): router internal redirects crash
  - [CVE-2026-47775](https://github.com/envoyproxy/envoy/security/advisories/GHSA-396h-jpq4-vc7p): OAuth2 code verifier padding oracle
  - [CVE-2026-48044](https://github.com/envoyproxy/envoy/security/advisories/GHSA-m3p9-47wh-88wg): zstd RLE zip bomb
  - [CVE-2026-47204](https://github.com/envoyproxy/envoy/security/advisories/GHSA-3jxh-8p6x-7pf6): grpc_stats filter segfault on Connect protocol requests to direct_response routes
  - [CVE-2026-47692](https://github.com/envoyproxy/envoy/security/advisories/GHSA-wh36-hm39-mm3r): PROXY Protocol v2 header generator emits "skipped" TLVs, causing 65 KB attacker-controlled
spillover into the upstream application stream
  - [CVE-2026-47778](https://github.com/envoyproxy/envoy/security/advisories/GHSA-f8x4-rw5x-f3r7): Embedded NUL in TLS SAN Truncation, Auth Bypass
  - [CVE-2026-48042](https://github.com/envoyproxy/envoy/security/advisories/GHSA-f24p-rxw2-g6pv): Stack overflow in destructor of highly nested JSON
  - [CVE-2026-48090](https://github.com/envoyproxy/envoy/security/advisories/GHSA-3cj2-c63f-q26f): OAuth2 filter late async token completion after stream teardown results in UAF/crash risk
  - [CVE-2026-48497](https://github.com/envoyproxy/envoy/security/advisories/GHSA-j6g2-wf95-q66q): DNS filter abnormal process termination on long query name
  - [CVE-2026-48743](https://github.com/envoyproxy/envoy/security/advisories/GHSA-8phg-2h2q-jgxf): HTTP/3 headers-only request/response content-length not validated
  - [CVE-2026-48706](https://github.com/envoyproxy/envoy/security/advisories/GHSA-7q3f-gwg7-j8g4): TcpStatsdSync buffer overflow with large stats name
  - [GHSA-p7c7-7c47-pwch](https://github.com/envoyproxy/envoy/security/advisories/GHSA-p7c7-7c47-pwch): Denial-of-Service Attack Against the HTTP/3 Stack via QPACK Blocked Decoding

* Upstream security fixes:
  - CVE-2026-47261: wasm: bumped `com_github_wasmtime` to resolve CVE-2026-47261.

* Behavior changes:
  - build: disabled the contrib extension `envoy.network.connection_balance.dlb` (Intel DLB connection balancer) at the Bazel layer for all builds and platforms due to a breakage at the source archive. See https://github.com/envoyproxy/envoy/issues/45491 for local workarounds.

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.35.13
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.35.13/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.35.13/version_history/v1.35/v1.35.13
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.35.12...v1.35.13

Signed-off-by: Greg Greenway <ggreenway@apple.com>
Signed-off-by: Jonh Wendell <jonh.wendell@redhat.com>
Signed-off-by: Kateryna Nezdolii [kateryna.nezdolii@gmail.com](mailto:kateryna.nezdolii@gmail.com)
Signed-off-by: Ryan Northey [ryan@synca.io](mailto:ryan@synca.io)
Signed-off-by: Boteng Yao [boteng@google.com](mailto:boteng@google.com)

### v1.38.2

- Date: 2026-06-10
- Version: v1.38.2
- Original notes: https://github.com/envoyproxy/envoy/releases/tag/v1.38.2
- Permalink: https://whatsnew.fyi/product/envoy/releases/v1.38.2

- **fixed** — Fixed RTDS runtime guard override removal so deleting an override restores the process-wide runtime guard value to the default value
- **added** — Added opt-in histograms for HTTP/2 header statistics, including header-entry count, header-map byte size, reassembled cookie header length, and individual cookie header count, enabled with envoy.reloadable_features.http2_record_histograms
- **added** — Added envoy.reloadable_features.http2_max_cookies_size_in_kb to limit the size of the reassembled cookie header

**Summary of changes**:

* Bug fixes:
  - runtime: fixed RTDS runtime guard override removal so deleting an override restores the process-wide runtime guard value to the default value.

* New features:
  - http2: added opt-in histograms for HTTP/2 header statistics, including header-entry count, header-map byte size, reassembled ``cookie`` header length, and individual ``cookie`` header count. Enable with ``envoy.reloadable_features.http2_record_histograms``; the histograms and runtime guard will be removed in a future Envoy release.
  - http2: added ``envoy.reloadable_features.http2_max_cookies_size_in_kb`` to limit the size of the reassembled ``cookie`` header. By default, no cookie-size limit is enforced.

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.38.2
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.38.2/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.38.2/version_history/v1.38/v1.38.2
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.38.1...v1.38.2

Signed-off-by: Ryan Northey <ryan@synca.io>
Signed-off-by: Kateryna Nezdolii <kateryna.nezdolii@gmail.com>

### v1.37.4

- Date: 2026-06-10
- Version: v1.37.4
- Original notes: https://github.com/envoyproxy/envoy/releases/tag/v1.37.4
- Permalink: https://whatsnew.fyi/product/envoy/releases/v1.37.4

- **fixed** — Fixed RTDS runtime guard override removal so deleting an override restores the process-wide runtime guard value to the default value
- **added** — Added opt-in histograms for HTTP/2 header statistics, including header-entry count, header-map byte size, reassembled cookie header length, and individual cookie header count, enabled with envoy.reloadable_features.http2_record_histograms
- **added** — Added envoy.reloadable_features.http2_max_cookies_size_in_kb to limit the size of the reassembled cookie header

**Summary of changes**:

* Bug fixes:
  - runtime: fixed RTDS runtime guard override removal so deleting an override restores the process-wide runtime guard value to the default value.

* New features:
  - http2: added opt-in histograms for HTTP/2 header statistics, including header-entry count, header-map byte size, reassembled ``cookie`` header length, and individual ``cookie`` header count. Enable with ``envoy.reloadable_features.http2_record_histograms``; the histograms and runtime guard will be removed in a future Envoy release.
  - http2: added ``envoy.reloadable_features.http2_max_cookies_size_in_kb`` to limit the size of the reassembled ``cookie`` header. By default, no cookie-size limit is enforced.

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.37.4
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.37.4/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.37.4/version_history/v1.37/v1.37.4
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.37.3...v1.37.4

Signed-off-by: Ryan Northey [ryan@synca.io](mailto:ryan@synca.io)
Signed-off-by: Kateryna Nezdolii [kateryna.nezdolii@gmail.com](mailto:kateryna.nezdolii@gmail.com)

### v1.36.8

- Date: 2026-06-10
- Version: v1.36.8
- Original notes: https://github.com/envoyproxy/envoy/releases/tag/v1.36.8
- Permalink: https://whatsnew.fyi/product/envoy/releases/v1.36.8

- **fixed** — Fixed RTDS runtime guard override removal so deleting an override restores the process-wide runtime guard value to the default value
- **added** — Added opt-in histograms for HTTP/2 header statistics, including header-entry count, header-map byte size, reassembled cookie header length, and individual cookie header count, enabled with envoy.reloadable_features.http2_record_histograms
- **added** — Added envoy.reloadable_features.http2_max_cookies_size_in_kb to limit the size of the reassembled cookie header

**Summary of changes**:

* Bug fixes:
  - runtime: fixed RTDS runtime guard override removal so deleting an override restores the process-wide runtime guard value to the default value.

* New features:
  - http2: added opt-in histograms for HTTP/2 header statistics, including header-entry count, header-map byte size, reassembled ``cookie`` header length, and individual ``cookie`` header count. Enable with ``envoy.reloadable_features.http2_record_histograms``; the histograms and runtime guard will be removed in a future Envoy release.
  - http2: added ``envoy.reloadable_features.http2_max_cookies_size_in_kb`` to limit the size of the reassembled ``cookie`` header. By default, no cookie-size limit is enforced.

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.36.8
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.36.8/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.36.8/version_history/v1.36/v1.36.8
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.36.7...v1.36.8

Signed-off-by: Ryan Northey [ryan@synca.io](mailto:ryan@synca.io)
Signed-off-by: Kateryna Nezdolii [kateryna.nezdolii@gmail.com](mailto:kateryna.nezdolii@gmail.com)

### v1.35.12

- Date: 2026-06-10
- Version: v1.35.12
- Original notes: https://github.com/envoyproxy/envoy/releases/tag/v1.35.12
- Permalink: https://whatsnew.fyi/product/envoy/releases/v1.35.12

- **fixed** — Fixed RTDS runtime guard override removal so deleting an override restores the process-wide runtime guard value to the default value
- **added** — Added opt-in histograms for HTTP/2 header statistics, including header-entry count, header-map byte size, reassembled cookie header length, and individual cookie header count, enabled with envoy.reloadable_features.http2_record_histograms
- **added** — Added envoy.reloadable_features.http2_max_cookies_size_in_kb to limit the size of the reassembled cookie header

**Summary of changes**:

* Bug fixes:
  - runtime: fixed RTDS runtime guard override removal so deleting an override restores the process-wide runtime guard value to the default value.

* New features:
  - http2: added opt-in histograms for HTTP/2 header statistics, including header-entry count, header-map byte size, reassembled ``cookie`` header length, and individual ``cookie`` header count. Enable with ``envoy.reloadable_features.http2_record_histograms``; the histograms and runtime guard will be removed in a future Envoy release.
  - http2: added ``envoy.reloadable_features.http2_max_cookies_size_in_kb`` to limit the size of the reassembled ``cookie`` header. By default, no cookie-size limit is enforced.

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.35.12
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.35.12/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.35.12/version_history/v1.35/v1.35.12
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.35.11...v1.35.12

Signed-off-by: Ryan Northey [ryan@synca.io](mailto:ryan@synca.io)
Signed-off-by: Kateryna Nezdolii [kateryna.nezdolii@gmail.com](mailto:kateryna.nezdolii@gmail.com)

### v1.38.1

- Date: 2026-06-04
- Version: v1.38.1
- Original notes: https://github.com/envoyproxy/envoy/releases/tag/v1.38.1
- Permalink: https://whatsnew.fyi/product/envoy/releases/v1.38.1

- **security** — HTTP/2 streams are now reset if they violate the configured maximum header list size, and uncompressed cookies now count towards mutable_max_request_headers_kb and max_headers_count limits to protect against HPACK cookie-bomb attacks
- **security** — Fixed a timing side-channel in oauth2 HMAC verification that could leak HMAC secret validity
- **security** — Fixed a crash in oauth2 where AES-CBC decryption of token cookies could spuriously succeed on a secret mismatch, tripping a HeaderString validation assert
- **security** — Applied nghttp2 CVE-2026-27135 patch for HTTP/2
- **fixed** — Fixed a crash in the HTTP filter when a stream was already above the downstream write-buffer high watermark at filter-chain construction time
- **changed** — The upstream transport failure reason is no longer included in the HTTP response body sent to downstream clients, but remains available in access logs
- **changed** — Load balancer rebuild coalescing during EDS batch host updates is now opt-in

**Summary of changes**:

* Security fixes:
  - [CVE-2026-47774](https://github.com/envoyproxy/envoy/security/advisories/GHSA-22m2-hvr2-xqc8): http2: HTTP/2 streams are now reset if they violate the configured maximum header list size. Uncompressed cookies now count towards ``mutable_max_request_headers_kb`` and ``max_headers_count`` limits, protecting against an HPACK cookie-bomb that could cause excessive memory usage. This can be reverted with ``envoy.reloadable_features.http2_include_cookies_in_limits``.
  - oauth2: fixed a timing side-channel in HMAC verification that could leak HMAC secret validity.
  - oauth2: fixed a crash where AES-CBC decryption of token cookies could spuriously succeed (~1/256) on a secret mismatch, tripping a ``HeaderString`` validation assert.
  - CVE-2026-27135: http2: applied nghttp2 CVE-2026-27135 patch.

* Bug fixes:
  - dynamic_modules: fixed a crash in the HTTP filter when a stream was already above the downstream write-buffer high watermark at filter-chain construction time.

* Minor behavior changes:
  - router: the upstream transport failure reason is no longer included in the HTTP response body sent to downstream clients (still available in access logs via ``%UPSTREAM_TRANSPORT_FAILURE_REASON%``). Revert with ``envoy.reloadable_features.hide_transport_failure_reason_in_response_body``.
  - upstream: load balancer rebuild coalescing during EDS batch host updates is now opt-in. Re-enable with ``envoy.reloadable_features.coalesce_lb_rebuilds_on_batch_update``.

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.38.1
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.38.1/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.38.1/version_history/v1.38/v1.38.1
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.38.0...v1.38.1
    
Signed-off-by: Jonh Wendell <jonh.wendell@redhat.com>
Signed-off-by: Greg Greenway <ggreenway@apple.com>
Signed-off-by: Ryan Northey <ryan@synca.io>