CompatHub
Check EOL

Envoy Proxy version lifecycle

tool · CNCF

Current status

supported

Supported version lines, end-of-life status, and latest releases for Envoy Proxy — derived from official vendor sources, not third-party EOL aggregators.

Envoy is a high-performance edge and service proxy designed for cloud-native applications.

Security: 12 tracked advisories · 1 in CISA KEV. Details below — lifecycle and vulnerability status are separate.

Official site →

Version lines

40

Supported

4

EOL lines

36

Latest stable

1.39.1

2026-08-27

Releases tracked

278

At a glance

Latest release

1.39.1

Line 1.39

Recommended support line

1.39

standard support

Status

STANDARD SUPPORT

Newest supported: 1.39

EOL

2027-07-14

2 line(s) approaching EOL

Plan upgrade from Envoy Proxy 1.37 →

EOL lines include 1.35, 1.34, 1.33, 1.32, 1.31 (+31 more).

Recommended line: 1.39 (newest supported line with lowest lifecycle risk — not blindly “latest”).

Supported versions

4 currently supported release lines.

Version lineLifecycleLatest releaseReleasedEOLRisk
1.39
standard supportlow
1.39.12026-08-272027-07-14low
1.38
standard supportlow
1.38.42026-08-262027-04-23low
1.37
standard supportmedium
1.37.62026-08-262027-01-13medium
1.36
standard supportmedium
1.36.102026-08-262026-10-14medium

End-of-life versions

Historical and unsupported release lines. Exact EOL dates shown only when published by the vendor.

Version lineLatest releaseLifecycleEOLRisk
1.351.35.13
end of lifehigh
2026-07-23high
1.341.34.14
end of lifehigh
2026-04-15high
1.331.33.14
end of lifehigh
2026-01-14high
1.321.32.13
end of lifehigh
2025-10-15high
1.311.31.10
end of lifehigh
2025-07-19high
1.301.30.11
end of lifehigh
2025-04-16high
1.291.29.12
end of lifehigh
2025-01-16high
1.281.28.7
end of lifehigh
2024-10-19high
1.271.27.7
end of lifehigh
2024-07-26high
1.261.26.8
end of lifehigh
2024-04-18high
1.251.25.11
end of lifehigh
2024-01-18high
1.241.24.12
end of lifehigh
2023-10-19high
1.231.23.12
end of lifehigh
2023-07-15high
1.221.22.11
end of lifehigh
2023-04-15high
1.211.21.6
end of lifehigh
2023-01-12high
1.201.20.7
end of lifehigh
2022-10-05high
1.191.19.5
end of lifehigh
2022-07-14high
1.181.18.6
end of lifehigh
2022-04-15high
1.171.17.4
end of lifehigh
2022-01-11high
1.161.16.5
end of lifehigh
2021-10-08high
1.151.15.5
end of lifehigh
2021-07-07high
1.141.14.7
end of lifehigh
2021-04-08high
1.131.13.8
end of lifehigh
2021-01-20high
1.121.12.7
end of lifehigh
2020-11-01high
1.111.11.2
end of lifehigh
2020-07-11high
1.101.10.0
end of lifehigh
2020-04-05high
1.91.9.1
end of lifehigh
2019-12-20high
1.81.8.0
end of lifehigh
2019-10-04high
1.71.7.1
end of lifehigh
2019-06-21high
1.61.6.0
end of lifehigh
2019-03-20high
1.51.5.0
end of lifehigh
2018-12-05high
1.41.4.0
end of lifehigh
2018-08-24high
1.31.3.0
end of lifehigh
2018-05-17high
1.21.2.0
end of lifehigh
2018-03-07high
1.11.1.0
end of lifehigh
2017-11-30high
1.01.0.0
end of lifehigh
2017-09-12high

Lifecycle overview

Support windows from official lifecycle periods. Empty segments mean no dated period for that phase.

  • 1.39standard support · EOL 2027-07-14
    standard support
  • 1.38standard support · EOL 2027-04-23
    standard support
  • 1.37standard support · EOL 2027-01-13
    standard support
  • 1.36standard support · EOL 2026-10-14
    standard support
  • 1.35end of life · EOL 2026-07-23
    standard supportend of life
  • 1.34end of life · EOL 2026-04-15
    standard supportend of life
  • 1.33end of life · EOL 2026-01-14
    standard supportend of life
  • 1.32end of life · EOL 2025-10-15
    standard supportend of life
  • 1.31end of life · EOL 2025-07-19
    standard supportend of life
  • 1.30end of life · EOL 2025-04-16
    standard supportend of life
  • 1.29end of life · EOL 2025-01-16
    standard supportend of life
  • 1.28end of life · EOL 2024-10-19
    standard supportend of life
  • 1.27end of life · EOL 2024-07-26
    standard supportend of life
  • 1.26end of life · EOL 2024-04-18
    standard supportend of life
  • 1.25end of life · EOL 2024-01-18
    standard supportend of life
  • 1.24end of life · EOL 2023-10-19
    standard supportend of life

Showing 16 of 40 lines with lifecycle periods. See the directory below for the full list.

Known exploited vulnerabilities

CVE entries that CISA lists in the Known Exploited Vulnerabilities catalogue, including due dates and ransomware use when published. CVSS shown when NVD enrichment is available.

  • CVE-2023-44487Known exploited

    HTTP/2 Rapid Reset Attack Vulnerability

    CISA KEV:
    listed · added 2023-10-10 · due 2023-10-31
    Required action:
    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    CVSS:
    7.5 (high) · NVD
    CWE:
    CWE-400
    Affected:
    >=1.5,<1.1; <3.4.2; <10.5.3; <9.4.0; >=12.0.0,<12.0.2; >=11.0.0-milestone9,<=11.0.0-milestone9; >=9.0.0,<9.2.3; <1.28.0; <2023-10-08; <2.7.5; >=7.0.0,<7.0.12; >=1.27.0,<=1.27.0; <2023.10.16.00; >=1.21.0,<1.21.3; <0.17.0; >=1.57.0-NA,<1.58.3; >=1.57.0-NA,<1.58.3; >=1.57.0-NA,<=1.57.0-NA; >=1.19.0,<1.19.1; <=2.427; <4.2.2; <1.26.0; >=2.14.1,<=2.14.1; <4.1.100; <1.57.0; >=1.9.5,<=1.25.2; >=20.0.0,<20.8.1; <1.21.4.3; <2.5.0; >=4.0,<=4.0; >=3.0.0-beta3,<2.10.5
    Fixed in:
    1.1, 3.4.2, 10.5.3, 9.4.0, 12.0.2, 9.2.3, 1.28.0, 2023-10-08, 2.7.5, 7.0.12, 2023.10.16.00, 1.21.3, 0.17.0, 1.58.3, 1.19.1, 4.2.2, 1.26.0, 4.1.100, 1.57.0, 20.8.1, 1.21.4.3, 2.5.0, 2.10.5
    Source:
    CISA KEV · Advisory

Known vulnerabilities

Recent OSV.dev advisories mapped to this product. CVSS/CWE from NVD and known-exploited status from CISA KEV when available. CompatHub is not the original vulnerability authority.

Known vulnerabilities
12
Known exploited
1
Highest CVSS
7.5
  • CVE-2023-44487Known exploited

    HTTP/2 Rapid Reset Attack Vulnerability

    CISA KEV:
    listed · added 2023-10-10 · due 2023-10-31
    Required action:
    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
    CVSS:
    7.5 (high) · NVD
    CWE:
    CWE-400
    Affected:
    >=1.5,<1.1; <3.4.2; <10.5.3; <9.4.0; >=12.0.0,<12.0.2; >=11.0.0-milestone9,<=11.0.0-milestone9; >=9.0.0,<9.2.3; <1.28.0; <2023-10-08; <2.7.5; >=7.0.0,<7.0.12; >=1.27.0,<=1.27.0; <2023.10.16.00; >=1.21.0,<1.21.3; <0.17.0; >=1.57.0-NA,<1.58.3; >=1.57.0-NA,<1.58.3; >=1.57.0-NA,<=1.57.0-NA; >=1.19.0,<1.19.1; <=2.427; <4.2.2; <1.26.0; >=2.14.1,<=2.14.1; <4.1.100; <1.57.0; >=1.9.5,<=1.25.2; >=20.0.0,<20.8.1; <1.21.4.3; <2.5.0; >=4.0,<=4.0; >=3.0.0-beta3,<2.10.5
    Fixed in:
    1.1, 3.4.2, 10.5.3, 9.4.0, 12.0.2, 9.2.3, 1.28.0, 2023-10-08, 2.7.5, 7.0.12, 2023.10.16.00, 1.21.3, 0.17.0, 1.58.3, 1.19.1, 4.2.2, 1.26.0, 4.1.100, 1.57.0, 20.8.1, 1.21.4.3, 2.5.0, 2.10.5
    Source:
    CISA KEV · Advisory
  • CVE-2026-48090

    Envoy HTTP: OAuth2 filter late async token completion after stream teardown (UAF / crash risk)

    Affected:
    >=1.38.0,<1.38.3
    Fixed in:
    1.38.3
    Source:
    OSV source · Advisory
  • CVE-2026-47220

    Envoy: Segmentation fault when using %REQUESTED_SERVER_NAME% in log format

    Affected:
    >=1.38.0,<1.38.3
    Fixed in:
    1.38.3
    Source:
    OSV source · Advisory
  • CVE-2026-47205

    Envoy: ext_authz Use-After-Free during Stream Teardown with Per-Route Overrides

    Affected:
    >=1.38.0,<1.38.3
    Fixed in:
    1.38.3
    Source:
    OSV source · Advisory
  • CVE-2026-47692

    Envoy: PROXY Protocol v2 header generator emits "skipped" TLVs, causing 65 KB attacker-controlled spillover into the upstream application stream

    Affected:
    >=1.38.0,<1.38.3
    Fixed in:
    1.38.3
    Source:
    OSV source · Advisory
  • CVE-2026-47207

    Envoy crashes if multiple unexpected ext_proc responses are packed into one gRPC message

    Affected:
    >=1.38.0,<1.38.3
    Fixed in:
    1.38.3
    Source:
    OSV source · Advisory
  • CVE-2026-48706

    Envoy Heap Buffer Overflow in TcpStatsdSink

    Affected:
    >=1.38.0,<1.38.3
    Fixed in:
    1.38.3
    Source:
    OSV source · Advisory
  • CVE-2026-47204

    Envoy: grpc_stats filter segfault on Connect protocol requests to direct_response routes

    Affected:
    >=1.38.0,<1.38.3
    Fixed in:
    1.38.3
    Source:
    OSV source · Advisory
  • CVE-2026-47221

    Envoy: Null pointer deref in internal redirects

    Affected:
    >=1.38.0,<1.38.3
    Fixed in:
    1.38.3
    Source:
    OSV source · Advisory
  • CVE-2026-48743

    Envoy: HTTP/3 to HTTP/1 request smuggling via headers-only request with nonzero Content-Length

    Affected:
    >=1.38.0,<1.38.3
    Fixed in:
    1.38.3
    Source:
    OSV source · Advisory
  • CVE-2026-48497

    Envoy: Abnormal process termination in DNS UDP filter

    Affected:
    >=1.38.0,<1.38.3
    Fixed in:
    1.38.3
    Source:
    OSV source · Advisory
  • CVE-2026-48044

    Envoy Zstd Decompressor: Ratio Check at Wrong Loop Depth lead to memory explosion

    Affected:
    >=1.38.0,<1.38.3
    Fixed in:
    1.38.3
    Source:
    OSV source · Advisory

Compare versions

Side-by-side view of the most relevant release lines.

1.391.381.371.36
Statusstandard supportstandard supportstandard supportstandard support
Latest1.39.11.38.41.37.61.36.10
Released2026-08-272026-08-262026-08-262026-08-26
EOL2027-07-142027-04-232027-01-132026-10-14
Risklowlowmediummedium

Recent releases

Latest release date 2026-08-27 · 4 in last 30 days · 14 in last 90 days

Should I upgrade?

EOL approaching

Envoy Proxy 1.36 reaches end of life on 2026-10-14. Preferred line: 1.39.

Open upgrade planner →

Upgrade planning

Plan upgrades from Envoy Proxy version lines that have newer supported options.

Data coverage

Version lines
40
Concrete releases
278
Supported lines
4
EOL lines
36
Lifecycle coverage
40/40
EOL coverage
40/40
Provenance coverage
40/40

Data freshness

Last checked = last successful upstream check. Latest source update = when upstream content last changed.

Data last checked
2026-09-02
Latest source update
2026-09-02

Sources

First-party and other registered sources contributing release and lifecycle facts.

Version line directory

Complete navigation into detailed version-line pages.

Currently supported

Version lineStatusLatest releaseReleasedEOL
1.39
standard supportlow
1.39.12026-08-272027-07-14
1.38
standard supportlow
1.38.42026-08-262027-04-23
1.37
standard supportmedium
1.37.62026-08-262027-01-13
1.36
standard supportmedium
1.36.102026-08-262026-10-14

End of life

Version lineStatusLatest releaseReleasedEOL
1.35
end of lifehigh
1.35.132026-06-232026-07-23
1.34
end of lifehigh
1.34.142026-04-102026-04-15
1.33
end of lifehigh
1.33.142025-12-102026-01-14
1.32
end of lifehigh
1.32.132025-10-132025-10-15
1.31
end of lifehigh
1.31.102025-07-182025-07-19
1.30
end of lifehigh
1.30.112025-03-252025-04-16
1.29
end of lifehigh
1.29.122024-12-182025-01-16
1.28
end of lifehigh
1.28.72024-09-192024-10-19
1.27
end of lifehigh
1.27.72024-06-292024-07-26
1.26
end of lifehigh
1.26.82024-04-042024-04-18
1.25
end of lifehigh
1.25.112023-10-172024-01-18
1.24
end of lifehigh
1.24.122023-10-162023-10-19
1.23
end of lifehigh
1.23.122023-07-252023-07-15
1.22
end of lifehigh
1.22.112023-04-122023-04-15
1.21
end of lifehigh
1.21.62022-11-292023-01-12
1.20
end of lifehigh
1.20.72022-07-212022-10-05
1.19
end of lifehigh
1.19.52022-06-092022-07-14
1.18
end of lifehigh
1.18.62022-02-222022-04-15
1.17
end of lifehigh
1.17.42021-08-242022-01-11
1.16
end of lifehigh
1.16.52021-08-242021-10-08
1.15
end of lifehigh
1.15.52021-05-112021-07-07
1.14
end of lifehigh
1.14.72021-04-152021-04-08
1.13
end of lifehigh
1.13.82021-01-192021-01-20
1.12
end of lifehigh
1.12.72020-09-292020-11-01
1.11
end of lifehigh
1.11.22019-10-082020-07-11
1.10
end of lifehigh
1.10.02019-04-052020-04-05
1.9
end of lifehigh
1.9.12019-04-052019-12-20
1.8
end of lifehigh
1.8.02018-10-042019-10-04
1.7
end of lifehigh
1.7.12018-08-042019-06-21
1.6
end of lifehigh
1.6.02018-03-202019-03-20
1.5
end of lifehigh
1.5.02017-12-052018-12-05
1.4
end of lifehigh
1.4.02017-08-242018-08-24
1.3
end of lifehigh
1.3.02017-05-172018-05-17
1.2
end of lifehigh
1.2.02017-03-072018-03-07
1.1
end of lifehigh
1.1.02016-11-302017-11-30
1.0
end of lifehigh
1.0.02016-09-122017-09-12