Vulnerability Database · Go · Package report
github.com/envoyproxy/go-control-plane/envoy: vulnerability history, versions and safety
github.com/envoyproxy/go-control-plane/envoy is a package in the Go ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the Go ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
See all github.com/envoyproxy/go-control-plane/envoy vulnerabilities
Vulert verdict on github.com/envoyproxy/go-control-plane/envoy v1.40.0 i
Updated on 23 Oct 2026
Good news: v1.40.0, the version you would install today, has no known vulnerabilities.
- Security Minor issues
- Maintenance Sustainable
- Popularity Widely used
- Community Moderate
What to do: Stay on v1.40.0 or newer. This can change: a vulnerability disclosed tomorrow can affect v1.40.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release v1.40.0 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 1,738 i
- OpenSSF scorecard 5/10 i
- Last release this month i
- Licence Apache-2.0 i
Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for github.com/envoyproxy/go-control-plane/envoy, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- v0.0.0-20261023095121-937f50997859 23 Oct 2026
- v1.40.1-0.20261023095121-937f50997859 23 Oct 2026
- v0.0.0-20261022022917-a2fd476cc73c 22 Oct 2026
- v1.40.1-0.20261022022917-a2fd476cc73c 22 Oct 2026
- v0.0.0-20261020164159-f54fba5e273e 20 Oct 2026
- v1.40.1-0.20261020164159-f54fba5e273e 20 Oct 2026
- v0.0.0-20261020135749-7faa7788f3e0 20 Oct 2026
- v1.40.1-0.20261020135749-7faa7788f3e0 20 Oct 2026
- v0.0.0-20261020022119-549b668d5b33 20 Oct 2026
- v1.40.1-0.20261020022119-549b668d5b33 20 Oct 2026
- v0.0.0-20261019062740-64cb4bfe29d8 19 Oct 2026
- v1.40.1-0.20261019062740-64cb4bfe29d8 19 Oct 2026
- v0.0.0-20261018015348-ac1fe60cb09a 18 Oct 2026
- v1.40.1-0.20261018015348-ac1fe60cb09a 18 Oct 2026
- v0.0.0-20261017072358-cded3a6731eb 17 Oct 2026
- v1.40.1-0.20261017072358-cded3a6731eb 17 Oct 2026
- v0.0.0-20261016175318-3ddcf708b2e8 16 Oct 2026
- v1.40.1-0.20261016175318-3ddcf708b2e8 16 Oct 2026
- v0.0.0-20261016144118-e1e1cbb0fc50 16 Oct 2026
- v1.40.1-0.20261016144118-e1e1cbb0fc50 16 Oct 2026
- v0.0.0-20261015230554-d4fabda39917 15 Oct 2026
- v1.40.1-0.20261015230554-d4fabda39917 15 Oct 2026
- v0.0.0-20261015183830-ecaf399f2d0e 15 Oct 2026
- v1.40.1-0.20261015183830-ecaf399f2d0e 15 Oct 2026
- v0.0.0-20261014170222-9c4befd3c419 14 Oct 2026
- v1.39.1-0.20261014170222-9c4befd3c419 14 Oct 2026
- v1.40.1-0.20261014170222-9c4befd3c419 14 Oct 2026
- v1.39.1-0.20261014163454-bb16ef378c4a 14 Oct 2026
- v0.0.0-20261014143614-767fa0af4e1e 14 Oct 2026
- v1.39.1-0.20261014143614-767fa0af4e1e 14 Oct 2026
- v0.0.0-20261014075004-7d1a1f1e455b 14 Oct 2026
- v1.39.1-0.20261014075004-7d1a1f1e455b 14 Oct 2026
- v0.0.0-20261014055625-562257654159 14 Oct 2026
- v1.39.1-0.20261014055625-562257654159 14 Oct 2026
- v0.0.0-20261013224542-61b175b5f524 13 Oct 2026
- v1.39.1-0.20261013224542-61b175b5f524 13 Oct 2026
- v0.0.0-20261013120021-5c5ac772744b 13 Oct 2026
- v1.39.1-0.20261013120021-5c5ac772744b 13 Oct 2026
- v1.40.0 13 Oct 2026
- v0.0.0-20261013032812-1eb1cb5a3fe2 13 Oct 2026
- v1.39.1-0.20261013032812-1eb1cb5a3fe2 13 Oct 2026
- v0.0.0-20261011123632-0b31c014c0e3 11 Oct 2026
- v1.39.1-0.20261011123632-0b31c014c0e3 11 Oct 2026
- v0.0.0-20261011015143-768570091c12 11 Oct 2026
- v1.39.1-0.20261011015143-768570091c12 11 Oct 2026
- v0.0.0-20261007083326-1c27b0993199 07 Oct 2026
- v1.39.1-0.20261007083326-1c27b0993199 07 Oct 2026
- v0.0.0-20261007011341-13eafbbd31e6 07 Oct 2026
- v1.39.1-0.20261007011341-13eafbbd31e6 07 Oct 2026
- v0.0.0-20261006202908-c869b7a9d791 06 Oct 2026
- v1.39.1-0.20261006202908-c869b7a9d791 06 Oct 2026
- v0.0.0-20261005232250-94ef575c7702 05 Oct 2026
- v1.39.1-0.20261005232250-94ef575c7702 05 Oct 2026
- v0.0.0-20261005215302-dee69b21da22 05 Oct 2026
- v1.39.1-0.20261005215302-dee69b21da22 05 Oct 2026
- v0.0.0-20261005171058-1bc8af88e58c 05 Oct 2026
- v1.39.1-0.20261005171058-1bc8af88e58c 05 Oct 2026
- v0.0.0-20261005071813-1f9b601933a5 05 Oct 2026
- v1.39.1-0.20261005071813-1f9b601933a5 05 Oct 2026
- v0.0.0-20261005013304-91e0b64a9ad8 05 Oct 2026
- v1.39.1-0.20261005013304-91e0b64a9ad8 05 Oct 2026
- v0.0.0-20261003070529-6b14e001be9b 03 Oct 2026
- v1.39.1-0.20261003070529-6b14e001be9b 03 Oct 2026
- v0.0.0-20261003044552-02747e7f1388 03 Oct 2026
- v1.39.1-0.20261003044552-02747e7f1388 03 Oct 2026
- v0.0.0-20260930220544-bd48b98b7776 30 Sep 2026
- v1.39.1-0.20260930220544-bd48b98b7776 30 Sep 2026
- v0.0.0-20260930152302-3fc82372d894 30 Sep 2026
- v1.39.1-0.20260930152302-3fc82372d894 30 Sep 2026
- v0.0.0-20260930025058-6d3abf9dbb4a 30 Sep 2026
- v1.39.1-0.20260930025058-6d3abf9dbb4a 30 Sep 2026
- v0.0.0-20260930013055-78912e27f157 30 Sep 2026
- v1.39.1-0.20260930013055-78912e27f157 30 Sep 2026
- v0.0.0-20260929194828-e8b80555f359 29 Sep 2026
- v1.39.1-0.20260929194828-e8b80555f359 29 Sep 2026
- v0.0.0-20260929151320-221d824141cf 29 Sep 2026
- v1.39.1-0.20260929151320-221d824141cf 29 Sep 2026
- v0.0.0-20260929114259-b46521a390b7 29 Sep 2026
- v1.39.1-0.20260929114259-b46521a390b7 29 Sep 2026
- v0.0.0-20260929054239-1c870a60c001 29 Sep 2026
- v1.39.1-0.20260929054239-1c870a60c001 29 Sep 2026
- v0.0.0-20260929025122-e58607f4bed2 29 Sep 2026
- v1.39.1-0.20260929025122-e58607f4bed2 29 Sep 2026
- v1.39.1-0.20260928215623-583dffdd5ea5 28 Sep 2026
- v0.0.0-20260928161640-91cfd8940dcc 28 Sep 2026
- v1.39.1-0.20260928161640-91cfd8940dcc 28 Sep 2026
- v0.0.0-20260928114619-772ea2910a77 28 Sep 2026
- v1.39.1-0.20260928114619-772ea2910a77 28 Sep 2026
- v0.0.0-20260928030809-24d523751bbe 28 Sep 2026
- v1.39.1-0.20260928030809-24d523751bbe 28 Sep 2026
- v0.0.0-20260928022917-6d29001c431c 28 Sep 2026
- v0.0.0-20260927022543-fc8912c55e30 27 Sep 2026
- v1.39.1-0.20260927022543-fc8912c55e30 27 Sep 2026
- v0.0.0-20260926055848-e2e507dc6eb4 26 Sep 2026
- v1.39.1-0.20260926055848-e2e507dc6eb4 26 Sep 2026
- v0.0.0-20260926055600-8a64c4aa265f 26 Sep 2026
- v0.0.0-20260926005603-77163881f865 26 Sep 2026
- v1.39.1-0.20260926005603-77163881f865 26 Sep 2026
- v0.0.0-20260925211727-d72bb134a3a5 25 Sep 2026
- v1.39.1-0.20260925211727-d72bb134a3a5 25 Sep 2026
- v0.0.0-20260925201704-70c6e0db8c78 25 Sep 2026
- v1.39.1-0.20260925201704-70c6e0db8c78 25 Sep 2026
- v0.0.0-20260925195156-aa49aa544abe 25 Sep 2026
- v0.0.0-20260925170128-8e872c246848 25 Sep 2026
- v1.39.1-0.20260925170128-8e872c246848 25 Sep 2026
- v0.0.0-20260925150254-64289bff1621 25 Sep 2026
- v1.39.1-0.20260925150254-64289bff1621 25 Sep 2026
- v0.0.0-20260925041026-90594b5c8975 25 Sep 2026
- v1.39.1-0.20260925041026-90594b5c8975 25 Sep 2026
- v0.0.0-20260924200347-720a0436c8a3 24 Sep 2026
- v1.39.1-0.20260924200347-720a0436c8a3 24 Sep 2026
- v0.0.0-20260924002210-c454fa813f3d 24 Sep 2026
- v1.39.1-0.20260924002210-c454fa813f3d 24 Sep 2026
- v0.0.0-20260923144502-55738e0c1e8d 23 Sep 2026
- v1.39.1-0.20260923144502-55738e0c1e8d 23 Sep 2026
- v0.0.0-20260923142620-686fd7de7df2 23 Sep 2026
- v0.0.0-20260923133814-c05196b774af 23 Sep 2026
- v0.0.0-20260921174615-574d1046ec56 21 Sep 2026
- v1.39.1-0.20260921174615-574d1046ec56 21 Sep 2026
- v0.0.0-20260921043436-e6a0cf00dc97 21 Sep 2026
The newest 120 of 1,321 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for github.com/envoyproxy/go-control-plane/envoy
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About github.com/envoyproxy/go-control-plane/envoy
Is github.com/envoyproxy/go-control-plane/envoy safe to use?
Vulert has no vulnerabilities on record for github.com/envoyproxy/go-control-plane/envoy in Go at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is github.com/envoyproxy/go-control-plane/envoy's Vulert package health score?
Vulert scores github.com/envoyproxy/go-control-plane/envoy 85/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of github.com/envoyproxy/go-control-plane/envoy affected?
No. v1.40.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
How many vulnerabilities does github.com/envoyproxy/go-control-plane/envoy have?
0 vulnerabilities are recorded for github.com/envoyproxy/go-control-plane/envoy in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new github.com/envoyproxy/go-control-plane/envoy vulnerabilities disclosed?
0 vulnerabilities were recorded for github.com/envoyproxy/go-control-plane/envoy in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of github.com/envoyproxy/go-control-plane/envoy are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor github.com/envoyproxy/go-control-plane/envoy for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/envoyproxy/go-control-plane/envoy version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.