"description":"Envoy is a cloud-native high-performance edge\/middle\/service proxy. In Envoy version 1.17.0 an attacker can bypass authentication by presenting a JWT token with an issuer that is not in the provider list when Envoy's JWT Authentication filter is configured with the `allow_missing` requirement under `requires_any` due t CVE project by @Sn0wAlice",