StackRadarChart IndexLive demo

CVE-2026-53719

Medium

Advisory

Published 16 Jul 2026In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 24; of 17,781 indexed, latest versions
Container images: 15; deployed by those charts
Fix available: 1 of 1; affected package

Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

Carried by container images the latest versions of 24 of 17,781 indexed charts deploy, on 15 images.

Affected package	Affected versions	Fixed in	Images
github.com/envoyproxy/gatewaygolang	v0.0.0-20260708095704-c038192c8757, v0.4.0, v0.5.0, v0.5.0-rc.1.0.20260429103802-5cb4886c4a92+5 more	1.7.4	15

OSV records: GHSA-m2v6-2jmh-4c68
Also known as: GO-2026-6009

Charts affected

24 by stars

Chart

Latest

Affected images

Radar Score

kuadrant-operatorkuadrant

1 of 4 See more

kuadrant-operator kuadrant 1.5.3

1 of the 4 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
quay.io/kuadrant/kuadrant-operator :v1.5.3	18ad777aeb7a	github.com/envoyproxy/gateway@v1.3.3	1.7.4

Open the chart page →

210

gateway-helmappscode

1 of 2 See more

gateway-helm appscode 0.0.0-latest

1 of the 2 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/gateway :v0.0.1	a8a144f14889	github.com/envoyproxy/gateway@v0.4.0	1.7.4

Open the chart page →

1,057

kubedb-opscenterappscode

1 of 1 See more

kubedb-opscenter appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/kubedb/kubedb-ui-server :v0.42.0	e93dfe7454d4	github.com/envoyproxy/gateway@v1.6.3	1.7.4

Open the chart page →

217

smtprelayappscode

1 of 1 See more

smtprelay appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/smtprelay :v0.0.4	79c9c76a78e6	github.com/envoyproxy/gateway@v1.1.2	1.7.4

Open the chart page →

840

accounts-uiappscode

1 of 1 See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	github.com/envoyproxy/gateway@v1.6.3	1.7.4

Open the chart page →

2,592

aceappscode

1 of 2 See more

ace appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	github.com/envoyproxy/gateway@v1.6.3	1.7.4

Open the chart page →

2,894

ace-installerappscode

1 of 2 See more

ace-installer appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	github.com/envoyproxy/gateway@v1.6.3	1.7.4

Open the chart page →

3,225

ace-installer-certifiedappscode

1 of 2 See more

ace-installer-certified appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	github.com/envoyproxy/gateway@v1.6.3	1.7.4

Open the chart page →

3,225

billingappscode

1 of 1 See more

billing appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	github.com/envoyproxy/gateway@v1.6.3	1.7.4

Open the chart page →

2,592

catalog-managerappscode

1 of 1 See more

catalog-manager appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/catalog-manager :v0.13.0	fc336c5b9655	github.com/envoyproxy/gateway@v1.6.3	1.7.4

Open the chart page →

242

cluster-importerappscode

1 of 1 See more

cluster-importer appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/ace :v0.2.0	b8e03da90e70	github.com/envoyproxy/gateway@v1.6.3	1.7.4

Open the chart page →

999

dns-proxyappscode

1 of 1 See more

dns-proxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/cloudflare-dns-proxy :v0.0.5	dfbef0285e14	github.com/envoyproxy/gateway@v1.3.3	1.7.4

Open the chart page →

615

kube-ui-serverappscode

1 of 1 See more

kube-ui-server appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kube-ui-server :v0.7.0	79e67164b4f0	github.com/envoyproxy/gateway@v1.6.3	1.7.4

Open the chart page →

236

marketplace-apiappscode

1 of 1 See more

marketplace-api appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	github.com/envoyproxy/gateway@v1.6.3	1.7.4

Open the chart page →

2,592

outbox-syncerappscode

1 of 1 See more

outbox-syncer appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/outboxsyncer :v0.5.0	150baab6115d	github.com/envoyproxy/gateway@v1.6.3	1.7.4

Open the chart page →

313

platform-apiappscode

1 of 3 See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	github.com/envoyproxy/gateway@v1.6.3	1.7.4

Open the chart page →

37,268

service-gatewayappscode

1 of 3 See more

service-gateway appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/gateway :v1.8.2	4237fd16a3cb	github.com/envoyproxy/gateway@v0.5.0-rc.1.0.20260721092048-26103336a2f9	1.7.4

Open the chart page →

2,076

voyager-gatewayappscode

1 of 2 See more

voyager-gateway appscode 2026.7.21

1 of the 2 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/gateway :v1.8.2	4237fd16a3cb	github.com/envoyproxy/gateway@v0.5.0-rc.1.0.20260721092048-26103336a2f9	1.7.4

Open the chart page →

1,253

csghubcsghub

1 of 34 See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
envoyproxy/gateway :v1.7.5	156b7d32c73b	github.com/envoyproxy/gateway@v0.0.0-20260708095704-c038192c8757	1.7.4

Open the chart page →

58,897

1 of 10 See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
envoyproxy/gateway :v1.7.5	156b7d32c73b	github.com/envoyproxy/gateway@v0.0.0-20260708095704-c038192c8757	1.7.4

Open the chart page →

11,335

1 of 7 See more

dataflow csghub 2.5.0

1 of the 7 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
envoyproxy/gateway :v1.7.5	156b7d32c73b	github.com/envoyproxy/gateway@v0.0.0-20260708095704-c038192c8757	1.7.4

Open the chart page →

6,632

eg-edge-stackdatawire

1 of 7 See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
envoyproxy/gateway :v0.5.0	2a9f99d28567	github.com/envoyproxy/gateway@v0.5.0	1.7.4

Open the chart page →

10,666

ai-gateway-helmenvoy-ai-gateway

0.0.0-003ab39f36923b5d40609a601e2951b73f6318fb

1 of 1 See more

ai-gateway-helm envoy-ai-gateway 0.0.0-003ab39f36923b5d40609a601e2951b73f6318fb

1 of the 1 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
envoyproxy/ai-gateway-controller :003ab39f36923b5d40609a601e2951b73f6318fb	ec1f06ee29a7	github.com/envoyproxy/gateway@v1.5.0	1.7.4

Open the chart page →

824

voyager-gatewayopenshift

1 of 2 See more

voyager-gateway openshift 2026.1.15

1 of the 2 container images this version deploys carry CVE-2026-53719.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/gateway :v1.6.2	23f4da194134	github.com/envoyproxy/gateway@v0.5.0-rc.1.0.20260429103802-5cb4886c4a92	1.7.4

Open the chart page →

2,567

Container images carrying it

15 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	github.com/envoyproxy/gateway@v1.6.3	1.7.4	7
envoyproxy/gateway :v1.7.5	156b7d32c73b	github.com/envoyproxy/gateway@v0.0.0-20260708095704-c038192c8757	1.7.4	3
ghcr.io/voyagermesh/gateway :v1.8.2	4237fd16a3cb	github.com/envoyproxy/gateway@v0.5.0-rc.1.0.20260721092048-26103336a2f9	1.7.4	2
envoyproxy/ai-gateway-controller :003ab39f36923b5d40609a601e2951b73f6318fb	ec1f06ee29a7	github.com/envoyproxy/gateway@v1.5.0	1.7.4	1
envoyproxy/gateway :v0.5.0	2a9f99d28567	github.com/envoyproxy/gateway@v0.5.0	1.7.4	1
ghcr.io/appscode/ace :v0.2.0	b8e03da90e70	github.com/envoyproxy/gateway@v1.6.3	1.7.4	1
ghcr.io/appscode/catalog-manager :v0.13.0	fc336c5b9655	github.com/envoyproxy/gateway@v1.6.3	1.7.4	1
ghcr.io/appscode/cloudflare-dns-proxy :v0.0.5	dfbef0285e14	github.com/envoyproxy/gateway@v1.3.3	1.7.4	1
ghcr.io/appscode/kube-ui-server :v0.7.0	79e67164b4f0	github.com/envoyproxy/gateway@v1.6.3	1.7.4	1
ghcr.io/appscode/outboxsyncer :v0.5.0	150baab6115d	github.com/envoyproxy/gateway@v1.6.3	1.7.4	1
ghcr.io/appscode/smtprelay :v0.0.4	79c9c76a78e6	github.com/envoyproxy/gateway@v1.1.2	1.7.4	1
ghcr.io/kubedb/kubedb-ui-server :v0.42.0	e93dfe7454d4	github.com/envoyproxy/gateway@v1.6.3	1.7.4	1
ghcr.io/voyagermesh/gateway :v1.6.2	23f4da194134	github.com/envoyproxy/gateway@v0.5.0-rc.1.0.20260429103802-5cb4886c4a92	1.7.4	1
ghcr.io/voyagermesh/gateway :v0.0.1	a8a144f14889	github.com/envoyproxy/gateway@v0.4.0	1.7.4	1
quay.io/kuadrant/kuadrant-operator :v1.5.3	18ad777aeb7a	github.com/envoyproxy/gateway@v1.3.3	1.7.4	1