CVE-2020-8661: Envoyproxy Envoy

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests.

Affected products

• Envoyproxy Envoy: up to and including 1.13.0
• Red Hat Openshift Service Mesh: version 1.0.9 only

Published 2020-03-04. Last modified 2026-10-02.