Most recent entries from all

BIT-envoy-2021-39204 — Excessive CPU usage in Pomerium

Affected: Bitnami: envoy

Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, incorrectly handles resetting of HTTP/2 streams with excessive complexity. This can lead to high CPU utilization when a large number of streams are reset. This can result in a DoS condition. Pomerium versions 0.14.8 and 0.15.1 contain an upgraded envoy binary with this vulnerability patched.

EUVD-2026-30491

fkie_cve-2021-39204

GHSA-5wjf-62hw-q78r — Excessive CPU usage

Affected: Go: github.com/pomerium/pomerium

Envoy, which Pomerium is based on, incorrectly handles resetting of HTTP/2 streams with excessive complexity. This can lead to high CPU utilization when a large number of streams are reset.

### Impact

This can result in a DoS condition.

### Patches Pomerium versions 0.14.8 and 0.15.1 contain an upgraded envoy binary with this vulnerability patched.

### Workarounds N/A

### References [envoy GSA](https://github.com/envoyproxy/envoy/security/advisories/GHSA-3xh3-33v5-chcc) [envoy CVE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32778) [envoy announcement](https://groups.google.com/g/envoy-announce/c/5xBpsEZZDfE/m/wD05NZBbAgAJ)

### For more information If you have any questions or comments about this advisory: * Open an issue in [pomerium/pomerium](https://github.com/pomerium/pomerium/issues) * Email us at [security@pomerium.com](mailto:security@pomerium.com)

Most recent entries from all

BIT-envoy-2021-39204 — Excessive CPU usage in Pomerium

EUVD-2026-30491

fkie_cve-2021-39204

GHSA-5wjf-62hw-q78r — Excessive CPU usage

gsd-2021-39204