https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:17:07.806480+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-envoy-2021-32778 BIT-envoy-2021-32778 — Excessive CPU utilization when closing HTTP/2 streams 2026-10-06T14:17:07.811256+00:00

Affected: Bitnami: envoy

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions envoy’s procedure for resetting a HTTP/2 stream has O(N^2) complexity, leading to high CPU utilization when a large number of streams are reset. Deployments are susceptible to Denial of Service when Envoy is configured with high limit on H/2 concurrent streams. An attacker wishing to exploit this vulnerability would require a client opening and closing a large number of H/2 streams. Envoy versions 1.19.1, 1.18.4, 1.17.4, 1.16.5 contain fixes to reduce time complexity of resetting HTTP/2 streams. As a workaround users may limit the number of simultaneous HTTP/2 dreams for upstream and downstream peers to a low number, i.e. 100.

 https://cve.radiocsirt.org/vuln/euvd-2026-28144 EUVD-2026-28144 2026-10-06T14:17:07.811365+00:00 EUVD-2026-28144 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32778 fkie_cve-2021-32778 2026-10-06T14:17:07.811398+00:00

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions envoy’s procedure for resetting a HTTP/2 stream has O(N^2) complexity, leading to high CPU utilization when a large number of streams are reset. Deployments are susceptible to Denial of Service when Envoy is configured with high limit on H/2 concurrent streams. An attacker wishing to exploit this vulnerability would require a client opening and closing a large number of H/2 streams. Envoy versions 1.19.1, 1.18.4, 1.17.4, 1.16.5 contain fixes to reduce time complexity of resetting HTTP/2 streams. As a workaround users may limit the number of simultaneous HTTP/2 dreams for upstream and downstream peers to a low number, i.e. 100.

 https://cve.radiocsirt.org/vuln/gsd-2021-32778 gsd-2021-32778 2026-10-06T14:17:07.811453+00:00 gsd-2021-32778 https://cve.radiocsirt.org/vuln/rhea-2021:4051 RHEA-2021:4051 — Red Hat Enhancement Advisory: Red Hat OpenShift Service Mesh 2.1.0 RPMs 2026-10-06T14:17:07.811473+00:00

envoyproxy/envoy: excessive CPU usage when handling a large number of HTTP/2 requests