Skip to content

Envoy Gateway: OCI layer extraction allocates make([]byte, h.Size) from untrusted tar header

Moderate severity GitHub Reviewed Published Jun 5, 2026 in envoyproxy/gateway • Updated Jul 16, 2026

No closed alerts for this advisory

Give feedback on Dependabot alerts