requests, Envoy sends an internally generated 400 error, which is sent to the <code>Network::Connection</code> buffer. If the client reads these responses slowly, it is possible to build up a large number of responses, and consume functionally unlimited memory. This bypasses Envoy’s overload manager, which will itself send an internally generated response when Envoy approaches configured memory thresholds, exacerbating the problem.</p><ul><li>CVSS Score: 7.5 <a href="https://nvd.nist.gov/vuln-metrics/cvss