Istio 1.9.5 or up</li><li>The patch version specified by your cloud provider</li></ul><h2 id=credit>Credit</h2><p>We would like to thank John Howard (Google) for reporting this issue.</p></div><nav class=pagenav><div class=left><a title="HTTP request paths with multiple slashes or escaped slash characters may bypass path based authorization rules." href=/v1.25/news/security/istio-security-2021-005/ class=next-link><svg class="icon left-arrow"><use xlink:href="/v1.25/img/icons.svg#left-arrow"/></svg>ISTIO-SE