CVE-2021-43824

Name of the Vulnerable Software and Affected Versions Envoy (affected versions not specified)

Description The issue affects Envoy, an open source edge and service proxy for cloud-native applications. A crafted request can crash Envoy when a CONNECT request is sent to the JWT filter configured with regex match, providing a denial of service attack vector.

Recommendations As a temporary workaround, consider not using regex in the JWT filter until a patch is available. Users are advised to upgrade to a newer version to resolve the issue.