Envoy v1.37.10 updates trusted certificate authorities

{
  "id": "1a5fff10c5eff592256d9026f035867568a389987704a45ab02457cd665f7140",
  "url": "https://github.com/envoyproxy/envoy/releases/tag/v1.37.10",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Envoy v1.37.10 updates trusted certificate authorities",
    "summary": "Envoy v1.37.10 updates Docker images to stop trusting compromised eMudhra CAs and removes two roots from Envoy Mobile’s built-in certificate bundle.",
    "evidence": "updated the Envoy docker images so they no longer trust the compromised eMudhra CAs.",
    "products": [
      {
        "name": {
          "value": "Envoy",
          "evidence": "updated the Envoy docker images"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "v1.37.10",
            "evidence": "v1.37.10"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "Envoy Mobile",
          "evidence": "removed the AAA Certificate Services and emSign ECC Root CA - G3 roots from the root certificate bundle built into Envoy Mobile."
        },
        "prerequisites": [
          {
            "value": "when it uses its built-in bundle",
            "evidence": "when it uses its built-in bundle"
          }
        ],
        "fixed_versions": [
          {
            "value": "v1.37.10",
            "evidence": "v1.37.10"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-envoyproxy-envoy",
  "document_id": 21006,
  "published_at": "2026-10-22T21:33:25+00:00"
}