Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 274/275 feeds/APIs · 468/469 docs · 8/9 advisories · checked 03:25 UTC Customize Public modeDiscuss ChangeIntel on Discord

Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header

Explicit identifiers and source references

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-53717 · Microsoft / collected KEV context

EUVD-2026-78069

GHSA-h7pq-86h8-rp5x

BIT-envoy-gateway-2026-53717

GO-2026-6008

cve-program · CVE-2026-53717

euvd · EUVD-2026-78069

nvd · CVE-2026-53717

osv · GHSA-h7pq-86h8-rp5x

osv · GO-2026-6008

Related operational evidence

Explicit CVE identifiers

No related operational record is retained in the current change model.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 03:25 UTC · 274 of 275 readable · 272 fully read · documentation 468/469 current