><h5>SOURCE CHANGES</h5><p>Inspect the full set of source code changes.</p></a></div><h2 id=security-update>Security update</h2><ul><li><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25017">CVE-2020-25017</a></strong>:
In some cases, Envoy only considers the first value when multiple headers are present. Also, Envoy does not replace all existing occurrences of a non-inline header.<ul><li><strong>CVSS Score</strong>: 8.3 <a href="https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?