Security
فارسی
All products

istio.io/istio

Go · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Istio: AuthorizationPolicy serviceAccounts regex injection via unescaped dotsCVE-2026-39350 · GHSA-9GCG-W975-3RJHVersion ranges need review. istio.io/istioOpenShift Service Mesh 3/openshift-service-mesh/istio-proxyv2-rhel9 GoRed Hat Medium Fix reported
Istio: SSRF via RequestAuthentication jwksUriCVE-2026-41413 · GHSA-FGW5-HP8F-XFHCVersion ranges need review. istio.io/istioOpenShift Service Mesh 3/openshift-service-mesh/istio-proxyv2-rhel9 GoRed Hat Medium Fix reported
Ill-formed headers may lead to unexpected behavior in IstioCVE-2022-31045 · GHSA-XWX5-5C9G-X68X istio.io/istioOpenShift Service Mesh 2.0/servicemesh GoRed Hat Medium Fix reported
Istio Fragments in Path May Lead to Authorization Policy BypassCVE-2021-39156 · GHSA-HQXW-MM44-GC4R istio.io/istio Go High Fix reported
Unauthenticated control plane denial of service attack in IstioCVE-2022-23635 · GHSA-856Q-XV3C-7F2F istio.io/istio Go High Fix reported
Authorization Policy Bypass Due to Case Insensitive Host ComparisonCVE-2021-39155 · GHSA-7774-7VR3-CC8J istio.io/istio Go High Fix reported
Istio ReDoS VulnerabilityCVE-2019-14993 · GHSA-QCVW-82HH-GQ38 istio.io/istio Go High Fix reported
Authorization bypass in IstioCVE-2020-16844 · GHSA-82MM-FFJR-H86C istio.io/istio Go Medium Fix reported
Istio vulnerable to denial of serviceCVE-2019-18817 · GHSA-VC7H-CMP3-4HW5 istio.io/istio Go High Fix reported
Istio may not check inbound TCP connections against istio-policyCVE-2019-12243 · GHSA-6G5F-F5PM-MJRG istio.io/istio Go High Fix reported