rability resulting from whitespace after HTTP/1 header values which could allow an attacker to bypass Istio&rsquo;s policy checks, potentially resulting in information disclosure or escalation of privileges.
<strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18838">CVE-2019-18838</a></strong>: Fix a vulnerability resulting from malformed HTTP request missing the &ldquo;Host&rdquo; header. An encoder filter that invokes Envoy&rsquo;s route manager APIs that access request&rsquo;s &ldquo