That's why HAProxy did testing to see if they were vulnerable.
https://cloud.google.com/blog/products/identity-security/how...
https://cloud.google.com/blog/products/identity-security/how...