tion you share with the Istio security team stays
within the Istio project. We don&rsquo;t disseminate the information to other
projects. We only share the information as needed to fix the issue.</p><p>We keep the reporter updated as the status of the security issue moves
from <code>triaged</code>, to <code>identified fix</code>, to <code>release planning</code>.</p><h2 id=fixing-the-issue>Fixing the issue</h2><p>Once a security vulnerability has been fully characterized, a fix is developed by the Istio tea