Download Latest Version v1.37.1 source code.tar.gz (44.7 MB)
Email in envelope

Get an email when there's a new version of Envoy

Home / v1.35.9
Name Modified Size InfoDownloads / Week
Parent folder
envoy-contrib-1.35.9-linux-x86_64 2026-03-10 111.5 MB
0
envoy-contrib-1.35.9-linux-aarch_64 2026-03-10 103.1 MB
0
checksums.txt.asc 2026-03-10 1.5 kB
0
debs.tar.gz 2026-03-10 764.9 MB
0
envoy-1.35.9-linux-aarch_64 2026-03-10 82.5 MB
0
envoy-1.35.9-linux-x86_64 2026-03-10 85.2 MB
0
README.md 2026-03-10 1.4 kB
0
v1.35.9 source code.tar.gz 2026-03-10 25.0 MB
0
v1.35.9 source code.zip 2026-03-10 31.6 MB
0
Totals: 9 Items   1.2 GB 0

Summary of changes:

  • Security fixes:
  • CVE-2026-26308: fix multivalue header bypass in rbac
  • CVE-2026-26310: network: fix crash in getAddressWithPort() when called with a scoped IPv6 address
  • CVE-2026-26309: json: fixed an off-by-one write that could corrupted the string null terminator

  • CVE-2026-26311: http: ensure decode* methods are blocked after a downstream reset

  • Bug fix:

  • Fixed OAuth2 refresh requests so host rewriting no longer overrides the original Host value.

  • Dependency updates:

  • Migrated googleurl source to GitHub (google/gurl).
  • Updated Kafka test binary to 3.9.2.
  • Updated Docker base images.

Docker images: https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.35.9 Docs: https://www.envoyproxy.io/docs/envoy/v1.35.9/ Release notes: https://www.envoyproxy.io/docs/envoy/v1.35.9/version_history/v1.35/v1.35.9 Full changelog: https://github.com/envoyproxy/envoy/compare/v1.35.8...v1.35.9

Signed-off-by: Ryan Northey ryan@synca.io Signed-off-by: Boteng Yao boteng@google.com

Source: README.md, updated 2026-03-10