istio.io/istio vulnerabilities (Go)

10 vulnerabilities.

• istio.io/istio Go Istio Vulnerable to SSRF via RequestAuthentication jwksUri CVE-2026-41413 Fix available 5.0 MediumApril 16, 2026
• istio.io/istio Go Istio AuthorizationPolicy Incorrect Regex Matching of Dots in serviceAccounts Fields Allows Policy Bypass CVE-2026-39350 Fix available 5.4 MediumApril 15, 2026
• istio.io/istio Go Ill-formed headers may lead to unexpected behavior in Istio CVE-2022-31045 Fix available 7.0 HighJune 9, 2022
• istio.io/istio Go Unauthenticated control plane denial of service attack in Istio CVE-2022-23635 Fix available 7.5 HighFebruary 22, 2022
• istio.io/istio Go Fragments in Path May Lead to Authorization Policy Bypass CVE-2021-39156 Public exploitFix available 8.1 HighAugust 24, 2021
• istio.io/istio Go Authorization Policy Bypass Due to Case Insensitive Host Comparison CVE-2021-39155 Fix available 8.3 HighAugust 24, 2021
• istio.io/istio Go Authorization bypass in Istio CVE-2020-16844 Fix available 6.8 MediumOctober 1, 2020
• istio.io/istio Go Istio vulnerable to denial of service CVE-2019-18817 Fix available 7.5 HighNovember 12, 2019
• istio.io/istio Go Istio ReDoS Vulnerability CVE-2019-14993 Fix available 7.5 HighAugust 13, 2019
• istio.io/istio Go Istio may not check inbound TCP connections against istio-policy CVE-2019-12243 Fix available 7.5 HighJune 5, 2019