CVE-2021-39162

score

<0.1

cvss

8.6

epss

1.6%

published

2021-09-09

kev added

—

first seen

2026-10-21

Pomerium, based on Envoy, contains a denial of service caused by abnormal termination when H/2 GOAWAY and SETTINGS frames are received simultaneously, letting attackers cause service disruption, exploit requires untrusted upstream servers sending specific frames.