blob: 3e1ef85a4229ca734e9618dd8b6928602b1e6d99 [file] [edit]
id: GO-2026-6007
modules:
- module: github.com/envoyproxy/gateway
versions:
- fixed: 1.7.4
- introduced: 1.8.0-rc.0
- fixed: 1.8.1
vulnerable_at: 1.8.0
summary: Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass in github.com/envoyproxy/gateway
cves:
- CVE-2026-53718
ghsas:
- GHSA-fcrp-7gc2-93g7
references:
- advisory: https://github.com/envoyproxy/gateway/security/advisories/GHSA-fcrp-7gc2-93g7
source:
id: GHSA-fcrp-7gc2-93g7
created: 2026-07-17T13:13:03.426486286-04:00
review_status: UNREVIEWED