CVE-2022-29225

score

<0.1

cvss

7.5

epss

1.6%

published

2022-06-09

kev added

—

first seen

2026-10-21

Envoy prior to 1.22.1 contains a zip bomb vulnerability caused by decompressors accumulating decompressed data into an intermediate buffer, letting attackers exhaust system memory and cause denial of service, exploit requires sending a highly compressed payload.