v1.39.3 v1.38.6

envoyproxy/envoyOct 6, 2026 → Oct 6, 20260 days between releases

Generating AI comparison

Analyzing what changed between v1.39.3 and v1.38.6. This page updates automatically — usually within a minute.

The Two Releases

v1.39.3

v1.39.3

Oct 6, 2026· 15 days ago

This release addresses critical security vulnerabilities in the OAuth2 and API Key authentication filters that could cause crashes when processing CONNECT requests missing a path header.

Full release notes
v1.38.6

v1.38.6

Oct 6, 2026· 15 days ago

This release includes security updates to prevent crashes in the OAuth2 and API Key authentication filters when handling CONNECT requests that lack a `:path` header.

Full release notes