trong>: This vulnerability affects Envoy’s HTTP/1 codec in its way it processes downstream&rsquo;s requests with large HTTP/2 headers. A successful exploitation of this vulnerability could lead to a denial of Service, escalation of privileges, or information disclosure.</p></li><li><p><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18802">CVE-2019-18802</a></strong>: HTTP/1 codec incorrectly fails to trim whitespace after header values. This could allow an attacker to bypass Istio