title: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.2.9  security update
description: envoy: Client may fake the header `x-envoy-original-path` envoy: gRPC client produces invalid protobuf when an HTTP header with non-UTF8 value is received envoy: Envoy forwards invalid HTTP/2 and HTTP/3 downstream envoy: Crash when a large request body is processed in Lua filter envoy: envoy doesn't escape HTTP header values envoy: Crash when a redirect url without a state param is received in the oauth filter
cpes: cpe:/a:redhat:service_mesh:2.2::el8