CVE-2026-73550

A flaw was found in Envoy. An unauthenticated remote attacker can cause a Denial of Service DoS by exhausting system memory and crashing the proxy process. This vulnerability occurs because Envoy fails to count discarded duplicate Host header values against request header size and count limits...