Description:
The grpc-stats filter creates stats with names based on client-provided data (grpc service/method names).

An untrusted client could send a stream of requests with unique names, causing a stat to be allocated in envoy for each one. This increases memory use, and load on the stats pipeline, and could be used to cause a denial-of-service.