github.com/envoyproxy/ai-gateway
Manages Unified Access to Generative AI Services built on Envoy Gateway
View on Github
Activity
- Latest release
- 22h ago
- Total releases
- 32
- Cadence
- ~5 days
- Last 12 months
- 15
Reach
- Stars
- 2.3k
Details
- First release
- Feb 20, 2025
| Version | Released | |
|---|---|---|
v1.2.1-rc2
pre
|
v1.2.1-rc2
pre
Dependencies (72)
+ 64 more |
|
v1.2.1-rc1
pre
|
v1.2.1-rc1
pre
Dependencies (72)
+ 64 more |
|
v1.2.0
minor
|
v1.2.0
minor
Dependencies (72)
+ 64 more |
|
v1.2.0-rc1
pre
|
v1.2.0-rc1
pre
Dependencies (72)
+ 64 more |
|
v1.1.0
minor
1 CVE
GHSA-953h-535j-jg2v
Oct 19, 2026
agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
Medium
Local
Low
None
SummaryThe MCP proxy's client-facing session ID embeds the authenticated caller's
subject (JWT ImpactAn attacker who obtains (or, under the default seed, forges) another user's
Location
Reproduction (code-level, not run against a live cluster)
Suggested fix
Detected byAeon vuln-scanner — agentic dataflow review ( Fixed in
1.2.0-rc1
References
Updated Oct 19, 2026 · Source: OSV.dev |
v1.1.0
minor
Dependencies (71)
+ 63 more |
|
v1.0.0
major
1 CVE
GHSA-953h-535j-jg2v
Oct 19, 2026
agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
Medium
Local
Low
None
SummaryThe MCP proxy's client-facing session ID embeds the authenticated caller's
subject (JWT ImpactAn attacker who obtains (or, under the default seed, forges) another user's
Location
Reproduction (code-level, not run against a live cluster)
Suggested fix
Detected byAeon vuln-scanner — agentic dataflow review ( Fixed in
1.2.0-rc1
References
Updated Oct 19, 2026 · Source: OSV.dev |
v1.0.0
major
Dependencies (70)
+ 62 more |
|
v1.0.0-rc1
pre
1 CVE
GHSA-953h-535j-jg2v
Oct 19, 2026
agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
Medium
Local
Low
None
SummaryThe MCP proxy's client-facing session ID embeds the authenticated caller's
subject (JWT ImpactAn attacker who obtains (or, under the default seed, forges) another user's
Location
Reproduction (code-level, not run against a live cluster)
Suggested fix
Detected byAeon vuln-scanner — agentic dataflow review ( Fixed in
1.2.0-rc1
References
Updated Oct 19, 2026 · Source: OSV.dev |
v1.0.0-rc1
pre
Dependencies (70)
+ 62 more |
|
v0.7.0
minor
1 CVE
GHSA-953h-535j-jg2v
Oct 19, 2026
agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
Medium
Local
Low
None
SummaryThe MCP proxy's client-facing session ID embeds the authenticated caller's
subject (JWT ImpactAn attacker who obtains (or, under the default seed, forges) another user's
Location
Reproduction (code-level, not run against a live cluster)
Suggested fix
Detected byAeon vuln-scanner — agentic dataflow review ( Fixed in
1.2.0-rc1
References
Updated Oct 19, 2026 · Source: OSV.dev |
v0.7.0
minor
Dependencies (70)
+ 62 more |
|
v0.6.0
minor
1 CVE
GHSA-953h-535j-jg2v
Oct 19, 2026
agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
Medium
Local
Low
None
SummaryThe MCP proxy's client-facing session ID embeds the authenticated caller's
subject (JWT ImpactAn attacker who obtains (or, under the default seed, forges) another user's
Location
Reproduction (code-level, not run against a live cluster)
Suggested fix
Detected byAeon vuln-scanner — agentic dataflow review ( Fixed in
1.2.0-rc1
References
Updated Oct 19, 2026 · Source: OSV.dev |
v0.6.0
minor
Dependencies (68)
+ 60 more |
|
v0.6.0-rc1
pre
2 CVEs
GHSA-953h-535j-jg2v
Oct 19, 2026
agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
Medium
Local
Low
None
SummaryThe MCP proxy's client-facing session ID embeds the authenticated caller's
subject (JWT ImpactAn attacker who obtains (or, under the default seed, forges) another user's
Location
Reproduction (code-level, not run against a live cluster)
Suggested fix
Detected byAeon vuln-scanner — agentic dataflow review ( Fixed in
1.2.0-rc1
References
Updated Oct 19, 2026 · Source: OSV.dev
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.6.0-rc1
pre
Dependencies (68)
+ 60 more |
|
v0.5.0
minor
2 CVEs
GHSA-953h-535j-jg2v
Oct 19, 2026
agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
Medium
Local
Low
None
SummaryThe MCP proxy's client-facing session ID embeds the authenticated caller's
subject (JWT ImpactAn attacker who obtains (or, under the default seed, forges) another user's
Location
Reproduction (code-level, not run against a live cluster)
Suggested fix
Detected byAeon vuln-scanner — agentic dataflow review ( Fixed in
1.2.0-rc1
References
Updated Oct 19, 2026 · Source: OSV.dev
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.5.0
minor
Dependencies (68)
+ 60 more |
|
v0.5.0-rc1
pre
2 CVEs
GHSA-953h-535j-jg2v
Oct 19, 2026
agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
Medium
Local
Low
None
SummaryThe MCP proxy's client-facing session ID embeds the authenticated caller's
subject (JWT ImpactAn attacker who obtains (or, under the default seed, forges) another user's
Location
Reproduction (code-level, not run against a live cluster)
Suggested fix
Detected byAeon vuln-scanner — agentic dataflow review ( Fixed in
1.2.0-rc1
References
Updated Oct 19, 2026 · Source: OSV.dev
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.5.0-rc1
pre
Dependencies (68)
+ 60 more |
|
v0.4.0-rc2
pre
2 CVEs
GHSA-953h-535j-jg2v
Oct 19, 2026
agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
Medium
Local
Low
None
SummaryThe MCP proxy's client-facing session ID embeds the authenticated caller's
subject (JWT ImpactAn attacker who obtains (or, under the default seed, forges) another user's
Location
Reproduction (code-level, not run against a live cluster)
Suggested fix
Detected byAeon vuln-scanner — agentic dataflow review ( Fixed in
1.2.0-rc1
References
Updated Oct 19, 2026 · Source: OSV.dev
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.4.0-rc2
pre
Dependencies (67)
+ 59 more |
|
v0.4.0
minor
2 CVEs
GHSA-953h-535j-jg2v
Oct 19, 2026
agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
Medium
Local
Low
None
SummaryThe MCP proxy's client-facing session ID embeds the authenticated caller's
subject (JWT ImpactAn attacker who obtains (or, under the default seed, forges) another user's
Location
Reproduction (code-level, not run against a live cluster)
Suggested fix
Detected byAeon vuln-scanner — agentic dataflow review ( Fixed in
1.2.0-rc1
References
Updated Oct 19, 2026 · Source: OSV.dev
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.4.0
minor
Dependencies (67)
+ 59 more |
|
v0.4.0-rc1
pre
2 CVEs
GHSA-953h-535j-jg2v
Oct 19, 2026
agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
Medium
Local
Low
None
SummaryThe MCP proxy's client-facing session ID embeds the authenticated caller's
subject (JWT ImpactAn attacker who obtains (or, under the default seed, forges) another user's
Location
Reproduction (code-level, not run against a live cluster)
Suggested fix
Detected byAeon vuln-scanner — agentic dataflow review ( Fixed in
1.2.0-rc1
References
Updated Oct 19, 2026 · Source: OSV.dev
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.4.0-rc1
pre
Dependencies (67)
+ 59 more |
|
v0.3.0
minor
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.3.0
minor
Dependencies (53)
+ 45 more |
|
v0.3.0-rc2
pre
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.3.0-rc2
pre
Dependencies (53)
+ 45 more |
|
v0.3.0-rc1
pre
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.3.0-rc1
pre
Dependencies (53)
+ 45 more |
|
v0.2.1
patch
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.2.1
patch
Dependencies (36)
+ 28 more |
|
v0.2.0-rc3
pre
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.2.0-rc3
pre
Dependencies (36)
+ 28 more |
|
v0.2.0
minor
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.2.0
minor
Dependencies (36)
+ 28 more |
|
v0.2.0-rc2
pre
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.2.0-rc2
pre
Dependencies (36)
+ 28 more |
|
v0.2.0-rc1
pre
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.2.0-rc1
pre
Dependencies (36)
+ 28 more |
|
v0.1.5
patch
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.1.5
patch
Dependencies (31)
+ 23 more |
|
v0.1.4
patch
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.1.4
patch
Dependencies (31)
+ 23 more |
|
v0.1.3
patch
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.1.3
patch
Dependencies (31)
+ 23 more |
|
v0.1.2
patch
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.1.2
patch
Dependencies (26)
+ 18 more |
|
v0.1.1
patch
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.1.1
patch
Dependencies (26)
+ 18 more |
|
v0.1.0
initial
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.1.0
initial
Dependencies (26)
+ 18 more |
|
v0.1.0-rc2
pre
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.1.0-rc2
pre
Dependencies (26)
+ 18 more |
|
v0.1.0-rc1
pre
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.1.0-rc1
pre
Dependencies (26)
+ 18 more |
|
v0.1.0-rctest
pre
1 CVE
GO-2026-5121
GHSA-4gph-2hhr-5mwg
Jun 25, 2026
Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Envoy AI Proxy - MCP Message Smuggling Vulnerability in github.com/envoyproxy/ai-gateway Fixed in
0.6.0
Updated Jun 25, 2026 · Source: OSV.dev |
v0.1.0-rctest
pre
Dependencies (26)
+ 18 more |