diff --git a/pkgs/servers/http/envoy/default.nix b/pkgs/servers/http/envoy/default.nix
index ad518e43aa87..d9236d531139 100644
--- a/pkgs/servers/http/envoy/default.nix
+++ b/pkgs/servers/http/envoy/default.nix
@@ -176,5 +176,13 @@ buildBazelPackage rec {
     license = licenses.asl20;
     maintainers = with maintainers; [ lukegb ];
     platforms = [ "x86_64-linux" "aarch64-linux" ];
+    knownVulnerabilities = [
+      "CVE-2023-27487"
+      "CVE-2023-27488"
+      "CVE-2023-27491"
+      "CVE-2023-27492"
+      "CVE-2023-27493"
+      "CVE-2023-27496"
+    ];
   };
 }