><strong><a href=https://github.com/envoyproxy/envoy/security/advisories/GHSA-5j4x-g36v-m283>CVE-2022-21654</a></strong>:
(CVSS Score 7.3, High): Incorrect configuration handling allows mTLS session re-use without re-validation after validation settings have changed.</p></li><li><p><strong><a href=https://github.com/envoyproxy/envoy/security/advisories/GHSA-7r5p-7fmh-jxpg>CVE-2022-21655</a></strong>:
(CVSS Score 7.5, High): Incorrect handling of internal redirects to routes with a direct response entry.</p>