Ambassador 0.75 addresses five vulnerabilities in Envoy Proxy, all related to HTTP/2. These five issues are rated as high severity, and address the class of http/2 denial of service issues disclosed today by Netflix. We recommend that all Ambassador users upgrade, especially users who rely on gRPC and/or gRpc. These security fixes are also included in the release of Envoy 1.11.1, which is also being released today. Credit to Jonathan Looney of Netflix for discovering these vulnerabilities.”]
Source: https://blog.getambassador.io/multiple-http-2-vulnerabilities-in-envoy-proxy-59351babb3aa