Issues

• upstream_rbac checks primary DNS address but can connect to a CIDR-denied fallback

  envoyproxy/envoy#48779 · Filter by author seslo82 opened on Oct 27, 2026

• ECDS: rejected filter config is committed to the subscription cache and never rolled back, freezing all subsequent LDS updates

  bugtriage
  envoyproxy/envoy#48760 · Filter by author jinxianda opened on Oct 27, 2026
  2

• QUIC-LB: an SDS update with a new key under the same configuration version is ACKed but never applied

  bugtriage
  envoyproxy/envoy#48759 · Filter by author gsalisbury opened on Oct 27, 2026

• Use-after-free (SIGSEGV) at process exit with the QUIC-LB connection ID generator, from ~HotRestartingChild

  bugtriage
  envoyproxy/envoy#48758 · Filter by author gsalisbury opened on Oct 27, 2026

• jwt_authn: on-demand JWKS refetch when the JWT kid is not in the cache

  enhancementtriage
  envoyproxy/envoy#48755 · Filter by author wbpcode opened on Oct 27, 2026

• internal_listener: propagate why the listener side closed a connection to the client side

  enhancementtriage
  envoyproxy/envoy#48736 · Filter by author panchoruy opened on Oct 26, 2026

• http2 codec doesn't end_stream after headers when it could

  triage
  envoyproxy/envoy#48719 · Filter by author ravenblackx opened on Oct 26, 2026
  1

• Internal gRPC async client sends HTTP/1.1 requests when upstream cluster uses use_downstream_protocol_config

  bugtriage
  envoyproxy/envoy#48703 · Filter by author Hyeonuk02 opened on Oct 25, 2026
  1

• Expose HTTP/2 client connection fingerprint (SETTINGS, WINDOW_UPDATE, PRIORITY, pseudo-header order) to filters

  enhancementtriage
  envoyproxy/envoy#48679 · Filter by author LoGan070raGnaR opened on Oct 25, 2026

• ext_proc: optionally send HTTP/1.1 request header names in their original case (and the Host header's position)

  enhancementtriage
  envoyproxy/envoy#48678 · Filter by author LoGan070raGnaR opened on Oct 25, 2026

• listener: buffered data discarded on combined Read/Closed during internal-listener protocol inspection

  bugtriage
  envoyproxy/envoy#48676 · Filter by author spring-zhao opened on Oct 25, 2026

• dynamic_modules: allow writing filter state that Wasm can read (factory key in set_filter_state_typed and a CelState object factory)

  envoyproxy/envoy#48661 · Filter by author juanmolle opened on Oct 24, 2026

• ext_proc: handleStandaloneModeOverride incorrectly checks decoding_state_ on response headers causing spurious message error

  bugtriage
  envoyproxy/envoy#48647 · Filter by author anil4fun opened on Oct 24, 2026
  1

• tcp_proxy: HTTP tunneling double-counts upstream wire bytes

  bugtriage
  envoyproxy/envoy#48643 · Filter by author AntonKanug opened on Oct 23, 2026

• Compression being applied to bodyless responses

  area/codec_compatibilityarea/compressionbug
  envoyproxy/envoy#48627 · Filter by author ravenblackx opened on Oct 23, 2026

• tls: verified peer issuer metadata is unavailable after downstream mTLS session resumption

  envoyproxy/envoy#48625 · Filter by author stias opened on Oct 23, 2026
  1

• oauth2: refresh token request does not send scope, Microsoft Entra ID rejects it with AADSTS90009

  envoyproxy/envoy#48503 · Filter by author mateusz-wozny opened on Oct 21, 2026

• stats: ':' in stat names breaks the statsd sinks; sanitization is applied inconsistently

  envoyproxy/envoy#48498 · Filter by author wbpcode opened on Oct 21, 2026

• router: Differentiate response_timeout response code details by upstream connection / TLS handshake phase

  area/connectionenhancementhelp wanted
  envoyproxy/envoy#48496 · Filter by author sanjaypujare opened on Oct 21, 2026
  3

• io_uring: improvements toward stable support

  area/perfenhancementio_uring
  Feature

  envoyproxy/envoy#48467 · Filter by author nezdolik opened on Oct 20, 2026
  

• Add Http method_override to ext_authz

  area/ext_authzenhancement
  envoyproxy/envoy#48457 · Filter by author slxxw opened on Oct 20, 2026
  2

• OIDC PAR Support for the OAuth2 Filter

  area/oauthenhancementhelp wanted
  envoyproxy/envoy#48443 · Filter by author denniskniep opened on Oct 19, 2026
  3

• dynamic modules: unable to access non-primitive dynamic metadata fields

  area/dynamic_modulesenhancement
  envoyproxy/envoy#48440 · Filter by author sschepens opened on Oct 19, 2026

• aws_lambda: preserve the original path and method when rewriting the request

  envoyproxy/envoy#48429 · Filter by author DuncanDoyle opened on Oct 19, 2026

• dynamic_modules: HTTP send_response reports grpc-status: 0 (OK) to gRPC clients

  envoyproxy/envoy#48410 · Filter by author lebeerman opened on Oct 16, 2026