Description Envoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicalization. Remediation References CVE-2020-25018 Related Vulnerabilities WordPress Plugin WooCommerce Cross-Site Scripting (2.6.2) phpMyAdmin Server-Side Request Forgery (SSRF) Vulnerability (CVE-2016-6621) WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Multiple Vulnerabilities (1.5.4) Oracle Application Server Other Vulnerability (CVE-2002-0947) WordPress Plugin Funky Penguin WP-PHPList 'unsubscribeemail' Parameter Cross-Site Scripting (2.10.2) Severity High Tags Missing Update Known Vulnerabilities CVE-2020-25018