https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 02:56:33 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-27748 EUVD-2026-27748 https://cve.radiocsirt.org/vuln/euvd-2026-27748 https://cve.radiocsirt.org/vuln/fkie_cve-2021-31920 <p>Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio authorization policy when path based authorization rules are used.</p> <p>Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio authorization policy when path based authorization rules are used.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-31920 https://cve.radiocsirt.org/vuln/ghsa-6q5m-22mq-q2xv <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Go: istio.io/istio</p> <p>Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio authorization policy when path based authorization rules are used.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Go: istio.io/istio</p> <p>Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio authorization policy when path based authorization rules are used.</p> https://cve.radiocsirt.org/vuln/ghsa-6q5m-22mq-q2xv https://cve.radiocsirt.org/vuln/gsd-2021-31920 gsd-2021-31920 https://cve.radiocsirt.org/vuln/gsd-2021-31920 https://cve.radiocsirt.org/vuln/rhsa-2021:1538 <p>envoyproxy/envoy: HTTP request with escaped slash characters can bypass Envoy&#39;s authorization mechanisms istio/istio: HTTP request with escaped slash characters can bypass authorization mechanisms</p> <p>envoyproxy/envoy: HTTP request with escaped slash characters can bypass Envoy&#39;s authorization mechanisms istio/istio: HTTP request with escaped slash characters can bypass authorization mechanisms</p> https://cve.radiocsirt.org/vuln/rhsa-2021:1538