 paths with multiple slashes or escaped slash characters may bypass path based authorization rules (May 11, 2021)" href=/v1.9/news/security/istio-security-2021-005/>ISTIO-SECURITY-2021-005</a></li><li role=none><a role=treeitem title="An external client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is configured with `AUTO_PASSTHROUGH` routing configuration (May 11, 2021)" href=/v1.9/news/security/istio-security-2021-006/>ISTIO-SECURITY-2021-006</a></li><li ro