- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 10 · 4 high, 2 medium
- Registry
- pkg.go.dev
Advisories 10
- CVE-2026-41413Medium 5.0
Istio Vulnerable to SSRF via RequestAuthentication jwksUri
Affected: fixed in 0.0.0-20260410004459-189832a289c1.
- CVE-2026-39350Medium 5.4
Istio AuthorizationPolicy Incorrect Regex Matching of Dots in serviceAccounts Fields Allows Policy Bypass
Affected: from 0.0.0-20241024090207-0bf27d49ba4b, fixed in 0.0.0-20260403004500-692e460c342d.
- CVE-2022-31045High 7.0
Ill-formed headers may lead to unexpected behavior in Istio
Affected: fixed in 1.12.18; from 1.13.0, fixed in 1.13.5; from 1.14.0, fixed in 1.14.1.
- CVE-2022-23635High 7.5
Unauthenticated control plane denial of service attack in Istio
Affected: from 1.13.0, fixed in 1.13.1; from 1.12.0, fixed in 1.12.4; fixed in 1.11.7.
- CVE-2021-39156High 8.1
Fragments in Path May Lead to Authorization Policy Bypass
Affected: fixed in 1.9.8; from 1.10.0, fixed in 1.10.4; from 1.11.0, fixed in 1.11.1.
- CVE-2021-39155High 8.3
Authorization Policy Bypass Due to Case Insensitive Host Comparison
Affected: fixed in 1.9.8; from 1.10.0, fixed in 1.10.4; from 1.11.0, fixed in 1.11.1.
- CVE-2020-16844Unrated
In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY actions using…
Affected: from 1.5.0, fixed in 1.5.9; from 1.6.0, fixed in 1.6.8.
- CVE-2019-18817Unrated
Istio 1.3.x before 1.3.5 allows Denial of Service because continue_on_listener_filters_timeout is set to True, a related issue to…
Affected: from 1.3.0, fixed in 1.3.5.
- CVE-2019-14993Unrated
Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the…
Affected: fixed in 1.1.13; from 1.2.0, fixed in 1.2.4.
- CVE-2019-12243Unrated
Istio 1.1.x through 1.1.6 has Incorrect Access Control.
Affected: from 1.1.0, fixed in 1.1.7.