# Envoy v1.37.9

> Networking & Messaging · 2026-10-12

A maintenance release with a disclosed security dependency update and fixes for concurrency bugs. It contains no announced operator configuration changes.

## Action needed
- **[security · low]** The `wasmtime` dependency update for `CVE-2026-54786`
  - The `wasmtime` dependency was updated to `24.0.10` to resolve `CVE-2026-54786`.

## Other recorded changes
- 3 (defect_corrected 3)

[Full analysis](https://ratatosk.io/en/releases/envoy/v1.37.9)

[Original release notes](https://github.com/envoyproxy/envoy/releases/tag/v1.37.9)