in which a very large grpc-timeout value leads to unexpected timeout calculations.<ul><li><strong>CVSS Score</strong>: 7.5 <a href="https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H&version=3.1">AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></li></ul></li><li><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29258">CVE-2021-29258</a></strong>:
Envoy contains a remotely exploitable vulnerability where an HTTP2 request with an empty metadata map ca