 bypass caused by improperly accepting certain request headers.</li></ul><p><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8843">CVE-2020-8843</a></strong>: Under certain circumstances it is possible to bypass a specifically configured Mixer policy. Istio-proxy accepts <code>x-istio-attributes</code> header at ingress that can be used to affect policy decisions when Mixer policy selectively applies to source equal to ingress. Istio 1.3 to 1.3.6 is vulnerable.</p></div><nav class=pa