ink a vulnerability is present in another project that Istio
depends on. For example, Envoy, Docker, or Kubernetes.</li></ul><p>When in doubt, please disclose privately. This includes, but is not limited to:</p><ul><li>Any crash, especially in Envoy</li><li>Any security policy (like Authentication or Authorization) bypass or weakness</li><li>Any potential Denial of Service (DoS)</li></ul><h3 id=when-not-to-report-a-security-vulnerability>When not to report a security vulnerability?</h3><p>Don&rsquo;t send a