v1.36.2

envoyproxy/envoyv1.36.2Oct 17, 2025by publish-envoy[bot]

AI Summary

A security update to fix a crash that occurs when Lua filters handle response bodies that are too large.

Key Highlights

Fix for Lua filter crash handling large response bodies

Full Release Notes

**Summary of changes**:

  * Security update:

    - CVE-2025-62504: A crash that occurs when Lua filters handle a sufficiently large response body

**Docker images**:
    https://hub.docker.com/r/envoyproxy/envoy/tags?page=1&name=v1.36.2
**Docs**:
    https://www.envoyproxy.io/docs/envoy/v1.36.2/
**Release notes**:
    https://www.envoyproxy.io/docs/envoy/v1.36.2/version_history/v1.36/v1.36.2
**Full changelog**:
    https://github.com/envoyproxy/envoy/compare/v1.36.1...v1.36.2

Signed-off-by: Ryan Northey <ryan@synca.io>
Signed-off-by: Boteng Yao <boteng@google.com>