← All advisories

Important severity7.5NVD Advisory· Published Jun 4, 2026

envoy: envoy: HTTP/2 Remote Denial of Service via HPACK compression bomb and Slowloris-style attack

CVE-2026-47774

Description

envoy: envoy: HTTP/2 Remote Denial of Service via HPACK compression bomb and Slowloris-style attack

Affected products

3

Envoyproxy/Envoyinferred
Envoy/envoyllm-create
osv-coords
pkg:bitnami/envoy
Range: < 1.35.11

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.