v1.36.12 v1.39.2

Name: envoy
Author: envoyproxy

envoyproxy/envoyOct 6, 2026 → Oct 1, 20260 days between releases

Generating AI comparison

Analyzing what changed between v1.36.12 and v1.39.2. This page updates automatically — usually within a minute.

The Two Releases

v1.36.12

Oct 6, 2026· 15 days ago

This release applies security patches to the OAuth2 and API Key authentication filters to prevent crashes resulting from the absence of a `:path` header in CONNECT requests.

Full release notes

v1.39.2

Oct 1, 2026· 20 days ago

This release updates BoringSSL to address a memory allocation denial-of-service vulnerability and updates build configurations by removing end-of-life Debian Bullseye support.

Full release notes