Skip to main content
logoTetrate Enterprise Gateway for EnvoyVersion: v1.6.x

v1.6.6

Updated Envoy Gateway to v1.6.7.

Security Updates​

  • Bumped google.golang.org/grpc to v1.79.3 to address CVE-2026-33186 (Critical, gRPC-Go authorization bypass via non-canonical HTTP/2 :path header).
  • Bumped go.opentelemetry.io/otel/sdk to v1.40.0 to address CVE-2026-24051 (High, OpenTelemetry Go SDK path hijacking on macOS/Darwin).

Bug Fixes​

  • Fixed a control plane panic caused by concurrent status mutation racing with the watchable map coalesce goroutine.
  • Fixed status conditions not being updated when a route is rejected due to multiple errors.
  • Fixed unresolved or unsupported HTTPRoute filters using BackendNotFound as the ResolvedRefs reason; they now correctly use UnsupportedValue.
  • Fixed benchmark JSON reports emitting 0 for p99 and p999 percentiles by using the nearest Nighthawk histogram percentiles.

Performance Improvements​

  • Introduced a translator context with preprocessed resource maps in the Gateway API translator, reducing translation time by up to approximately 45% on large workloads.