CVE-2021-31920

CVE-2021-31920

Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio authorization policy when path based authorization rules are used.

GHSA-6q5m-22mq-q2xv

Istio Authorization Bypass Vulnerability

ELSA-2021-9399

ELSA-2021-9399: olcne security update (IMPORTANT)

ELSA-2021-9398

ELSA-2021-9398: olcne security update (IMPORTANT)

ELSA-2021-9397

ELSA-2021-9397: olcne security update (IMPORTANT)