istio.io/istio vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-41413Mediumistio.io/istio: Istio: SSRF via RequestAuthentication jwksUriCVE-2026-39350Mediumistio.io/istio: Istio: AuthorizationPolicy serviceAccounts regex injection via unescaped dotsCVE-2022-31045Mediumistio.io/istio: Ill-formed headers may lead to unexpected behavior in IstioCVE-2019-18817Highistio.io/istio: Istio vulnerable to denial of serviceCVE-2019-14993Highistio.io/istio: Istio ReDoS VulnerabilityCVE-2022-23635Highistio.io/istio: Unauthenticated control plane denial of service attack in IstioCVE-2019-12243Highistio.io/istio: Istio may not check inbound TCP connections against istio-policyCVE-2020-16844Mediumistio.io/istio: Authorization bypass in IstioCVE-2021-39156Highistio.io/istio: Istio Fragments in Path May Lead to Authorization Policy BypassCVE-2021-39155Highistio.io/istio: Authorization Policy Bypass Due to Case Insensitive Host Comparison

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo