ntation assumes that access tokens are always validated thus allowing access in the presence of any access token attached to the request.</p></li><li><p><a href=https://github.com/envoyproxy/envoy/security/advisories/GHSA-rww6-8h7g-8jf6>CVE-2022-29228</a> (CVSS score 7.5, High): OAuth filter calls <code>continueDecoding()</code> from within <code>decodeHeaders()</code>
The OAuth filter would try to invoke the remaining filters in the chain after emitting a local response, which triggers an ASSERT() in newer