Description Envoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicalization. Remediation References CVE-2020-25018 Related Vulnerabilities MongoDb NULL Pointer Dereference Vulnerability (CVE-2026-13065) Joomla CVE-2018-17859 Vulnerability (CVE-2018-17859) Oracle Database Server CVE-2012-1745 Vulnerability (CVE-2012-1745) MySQL CVE-2019-2948 Vulnerability (CVE-2019-2948) Hiawatha Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-8358) Severity High Classification CVE-2020-25018 Tags Missing Update Known Vulnerabilities