d>CVSS Impact Score</td><td>7.5 <a href="https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV%3aN%2fAC%3aL%2fPR%3aN%2fUI%3aN%2fS%3aU%2fC%3aN%2fI%3aN%2fA%3aH">AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td></tr><tr><td>Affected Releases</td><td>1.4 to 1.4.9<br>1.5 to 1.5.4<br>1.6 to 1.6.1<br></td></tr></tbody></table><p>A vulnerability affecting the HTTP2 library used by Envoy has been fixed and publicly disclosed (c.f. <a href=https://github.com/nghttp2/nghttp2/security/advisories/GHSA-q5wr-xfw9-q7xr