Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Envoy Proxy Excessively Deep Nesting Vulnerability - CVE-2026-48042 - Vulnerability Database
Envoy Proxy

Envoy Proxy Excessively Deep Nesting Vulnerability - CVE-2026-48042

High
Reference: CVE-2026-48042
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-48042
Title: Envoy Proxy Excessively Deep Nesting Vulnerability
Overview:

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11 1.36.7 1.37.3 and 1.38.1 destructor of JSON Object results in stack overflow when deeply O(100K) nested objects are present. This vulnerability is fixed in 1.35.11 1.36.7 1.37.3 and 1.38.1.