# Envoy v1.36.13

> Networking & Messaging · 2026-10-12

A security maintenance release updates Wasmtime and fixes several race conditions in AWS request signing, AWS Lambda, local rate limiting, and secret distribution. It introduces no newly enforced configuration or behavioral requirements.

## Action needed
- **[security · low]** The `wasmtime` dependency update for CVE-2026-54786
  - `wasmtime` was updated to `24.0.10` to resolve CVE-2026-54786.

## Other recorded changes
- 3 (defect_corrected 3)

[Full analysis](https://ratatosk.io/en/releases/envoy/v1.36.13)

[Original release notes](https://github.com/envoyproxy/envoy/releases/tag/v1.36.13)