/a> (CVSS score 5.9, Medium): Segfault in <code>GrpcHealthCheckerImpl</code>
An attacker-controlled upstream server that is health checked using gRPC health checking can crash Envoy via a null pointer dereference in certain circumstances.</p></li><li><p><a href=https://github.com/envoyproxy/envoy/security/advisories/GHSA-h45c-2f94-prxh>CVE-2022-29226</a> (CVSS score 10.0, Critical): OAuth filter allows trivial bypass
The OAuth filter implementation does not include a mechanism for validating access tokens, 