Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2022-21654 — HIGH severity vulnerability | Release Alert

CVE-2022-21654

7.4

HIGHCVSS v3

Published

February 22, 2022

CVSS v2

6.8 MEDIUM

Affected

9 projects

Assigned by

GitHub

Severity scale

010

Description

Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy's tls allows re-use when some cert validation settings have changed from their default configuration. The only workaround for this issue is to ensure that default tls settings are used. Users are advised to upgrade.

envoyproxy/envoy

GitHubCloud-native high-performance edge/middle/service proxy

>= 1.21.0, < 1.21.1, >= 1.20.0, < 1.20.2, >= 1.19.0, < 1.19.3, >= 1.7.0, < 1.18.6NVD

GitHubFork of Envoy used for testing and tinkering as part of the Istio dev process

>= 1.21.0, < 1.21.1, >= 1.20.0, < 1.20.2, >= 1.19.0, < 1.19.3, >= 1.7.0, < 1.18.6NVD

More on this CVE

NVD↗GitHub Advisory↗

Python Package IndexSimple API for running external processes.

>= 1.21.0, < 1.21.1, >= 1.20.0, < 1.20.2, >= 1.19.0, < 1.19.3, >= 1.7.0, < 1.18.6NVD

NuGet GalleryWith the mediator pattern, communication between objects is encapsulated within a mediator object. Objects no longer communicate directly with each other, but instead communicate through the mediator. This reduces the dependencies between communicating objects, thereby reducing coupling.

>= 1.21.0, < 1.21.1, >= 1.20.0, < 1.20.2, >= 1.19.0, < 1.19.3, >= 1.7.0, < 1.18.6NVD

Crates.ioConveniences for manipulating environment variables.

>= 1.21.0, < 1.21.1, >= 1.20.0, < 1.20.2, >= 1.19.0, < 1.19.3, >= 1.7.0, < 1.18.6NVD

not-kennethreitz/envoy

GitHubPython Subprocesses for Humans™.

>= 1.21.0, < 1.21.1, >= 1.20.0, < 1.20.2, >= 1.19.0, < 1.19.3, >= 1.7.0, < 1.18.6NVD

NPMBetter Deployment with Node.js

>= 1.21.0, < 1.21.1, >= 1.20.0, < 1.20.2, >= 1.19.0, < 1.19.3, >= 1.7.0, < 1.18.6NVD

RubyGemsA simple, extendable messaging system built for deployments

>= 1.21.0, < 1.21.1, >= 1.20.0, < 1.20.2, >= 1.19.0, < 1.19.3, >= 1.7.0, < 1.18.6NVD

GitHubA simple, extendable messaging system designed for deployments

>= 1.21.0, < 1.21.1, >= 1.20.0, < 1.20.2, >= 1.19.0, < 1.19.3, >= 1.7.0, < 1.18.6NVD