uire any authentication from the attacker.</p><p>For simple installations, istiod is typically only reachable from within the cluster, limiting the blast radius. However, for some deployments, especially <a href=/v1.16/docs/setup/install/multicluster/primary-remote/>multicluster topologies</a>, this port is exposed over the public internet.</p><h3 id=envoy-cves>Envoy CVEs</h3><p>At this time it is not believed that Istio is vulnerable to these CVEs in Envoy. They are listed, however,
to be transparent.</p><