CVE-2022-29225

CVE-2022-29225 is a denial-of-service vulnerability affecting Envoy proxy versions prior to 1.22.1. An attacker can exploit this by sending a small, highly compressed payload (a "zip bomb") that exhausts system memory during decompression, leading to a denial of service. This vulnerability has a CVSS score of 7.5 (HIGH) due to its network-based attack vector, low attack complexity, and high impact on availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion beyond a single Reddit mention.