Envoy Gateway: Wasm cache ServeHTTP reads mappingPath2Cache without lock

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-53715 · CVE overview and exploitation status

EUVD-2026-78077

GHSA-8fv2-88gg-hm7q

BIT-envoy-gateway-2026-53715

GO-2026-6005

cve-program · CVE-2026-53715

• https://github.com/envoyproxy/gateway/security/advisories/GHSA-8fv2-88gg-hm7q
• https://github.com/envoyproxy/gateway/pull/9171
• https://github.com/envoyproxy/gateway/pull/9172
• https://github.com/envoyproxy/gateway/pull/9173
• https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464
• https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7
• https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead
• https://github.com/envoyproxy/gateway/releases/tag/v1.7.4
• https://github.com/envoyproxy/gateway/releases/tag/v1.8.1

euvd · EUVD-2026-78077

• https://github.com/envoyproxy/gateway/security/advisories/GHSA-8fv2-88gg-hm7q
• https://github.com/envoyproxy/gateway/pull/9171
• https://github.com/envoyproxy/gateway/pull/9172
• https://github.com/envoyproxy/gateway/pull/9173
• https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464
• https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7
• https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead
• https://github.com/envoyproxy/gateway/releases/tag/v1.7.4
• https://github.com/envoyproxy/gateway/releases/tag/v1.8.1

nvd · CVE-2026-53715

• https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464
• https://github.com/envoyproxy/gateway/commit/96e2b750868a459ace4b8b68e6a6e4fb0152b9b7
• https://github.com/envoyproxy/gateway/commit/b4737180c7e597490c6363075c565fa8cf24eead
• https://github.com/envoyproxy/gateway/pull/9171
• https://github.com/envoyproxy/gateway/pull/9172
• https://github.com/envoyproxy/gateway/pull/9173
• https://github.com/envoyproxy/gateway/releases/tag/v1.7.4
• https://github.com/envoyproxy/gateway/releases/tag/v1.8.1
• https://github.com/envoyproxy/gateway/security/advisories/GHSA-8fv2-88gg-hm7q

osv · GHSA-8fv2-88gg-hm7q

• https://github.com/envoyproxy/gateway/security/advisories/GHSA-8fv2-88gg-hm7q
• https://github.com/envoyproxy/gateway

osv · GO-2026-6005

• https://github.com/envoyproxy/gateway/security/advisories/GHSA-8fv2-88gg-hm7q

No related changes are available here.