v1.38.6 v1.37.8

envoyproxy/envoyOct 6, 2026 → Oct 6, 20260 days between releases

Generating AI comparison

Analyzing what changed between v1.38.6 and v1.37.8. This page updates automatically — usually within a minute.

The Two Releases

v1.38.6

v1.38.6

Oct 6, 2026· 15 days ago

This release includes security updates to prevent crashes in the OAuth2 and API Key authentication filters when handling CONNECT requests that lack a `:path` header.

Full release notes
v1.37.8

v1.37.8

Oct 6, 2026· 15 days ago

Addresses a security vulnerability in the OAuth2 and API Key authentication filters that could lead to crashes resulting from the absence of a `:path` header in CONNECT requests.

Full release notes