ate>Security update</h2><ul><li><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15104">CVE-2020-15104</a></strong>:
When validating TLS certificates, Envoy incorrectly allows wildcards in DNS Subject Alternative Name (SAN) to apply to multiple subdomains. For example, with a SAN of <code>*.example.com</code>, Envoy incorrectly allows <code>nested.subdomain.example.com</code>, when it should only allow <code>subdomain.example.com</code>.<ul><li>CVSS Score: 6.6 <a href="https://nvd.ni