.</div></aside></div><ul><li><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31920">CVE-2021-31920</a></strong>:
Istio contains a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters (<code>%2F</code> or <code>%5C</code>) could potentially bypass an Istio authorization policy when path based authorization rules are used. See the <a href=/v1.10/news/security/istio-security-2021-005>ISTIO-SECURITY-2021-005 bulletin</a> for mor