Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GO-2026-5289
  • Go/istio.io/istio
 Istio: AuthorizationPolicy serviceAccounts regex injection via unescaped dots in istio.io/istio 25 Jun
  • Fix available
GO-2026-5363
  • Go/istio.io/istio
 Istio: SSRF via RequestAuthentication jwksUri in istio.io/istio 25 Jun
  • Fix available
GHSA-fgw5-hp8f-xfhc
  • Go/istio.io/istio
 Istio: SSRF via RequestAuthentication jwksUri 16 Apr
  • Fix available
  • Severity - 5.0 (Medium)
GHSA-9gcg-w975-3rjh
  • Go/istio.io/istio
 Istio: AuthorizationPolicy serviceAccounts regex injection via unescaped dots 16 Apr
  • Fix available
  • Severity - 5.4 (Medium)
GHSA-xwx5-5c9g-x68x
  • Go/istio.io/istio
 Ill-formed headers may lead to unexpected behavior in Istio 10 Jun 2022
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-vc7h-cmp3-4hw5
  • Go/istio.io/istio
 Istio vulnerable to denial of service 24 May 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-qcvw-82hh-gq38
  • Go/istio.io/istio
 Istio ReDoS Vulnerability 24 May 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-856q-xv3c-7f2f
  • Go/istio.io/istio
 Unauthenticated control plane denial of service attack in Istio 23 Feb 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-6g5f-f5pm-mjrg
  • Go/istio.io/istio
 Istio may not check inbound TCP connections against istio-policy 15 Feb 2022
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-82mm-ffjr-h86c
  • Go/istio.io/istio
 Authorization bypass in Istio 15 Feb 2022
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-hqxw-mm44-gc4r
  • Go/istio.io/istio
 Istio Fragments in Path May Lead to Authorization Policy Bypass 30 Aug 2021
  • Fix available
  • Severity - 8.1 (High)
GHSA-7774-7vr3-cc8j
  • Go/istio.io/istio
 Authorization Policy Bypass Due to Case Insensitive Host Comparison 30 Aug 2021
  • Fix available
  • Severity - 8.3 (High)