istio.io/istio vulnerabilities
CVEs whose affected-version data names the istio.io/istio package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2021-39156High· 8.1PoCIstio Fragments in Path May Lead to Authorization Policy Bypass
Istio Fragments in Path May Lead to Authorization Policy Bypass
▾ Midnightistio · istio.io/istioEPSS 1.2%via OSV
CVE-2021-39155High· 8.3Authorization Policy Bypass Due to Case Insensitive Host Comparison
Authorization Policy Bypass Due to Case Insensitive Host Comparison
▾ Twilightistio · istio.io/istioEPSS 1.2%via OSV