kumahq/kuma 2.6.5

on GitHub

This is a patch release that every user should upgrade to.

This release addresses 2 CVEs:

• HTTP/2 CONTINUATION flood in net/http
• Envoy: HTTP/2: CPU exhaustion due to CONTINUATION frame flood

Changelog

• chore(deps): security update #9820 @kumahq
• chore(deps): update Envoy to v1.28.2 #9843 #9848 @michaelbeaumont