v1.36.11 v1.39.1

Name: envoy
Author: envoyproxy

envoyproxy/envoyOct 1, 2026 → Aug 27, 20260 days between releases

Generating AI comparison

Analyzing what changed between v1.36.11 and v1.39.1. This page updates automatically — usually within a minute.

The Two Releases

v1.36.11

Oct 1, 2026· 20 days ago

Addresses a critical security vulnerability (CVE-2026-35189) by patching BoringSSL to fix excessive memory allocation during TLS handshakes. Deprecated Debian Bullseye packaging due to end-of-life.

Full release notes

v1.39.1

Aug 27, 2026· 2 months ago

Continues security updates and TLS bug fixes, maintaining stability in HTTP/3, HTTP/2, and ext_proc components.

Full release notes