/svg></div><div class=content>Please note that <code>RequestAuthentication</code> is used to define a list of issuers that should be accepted. It does not reject
a request without JWT token.</div></aside></div><p>For Istio, this vulnerability only exists if your service:
* Accepts JWT tokens (with <code>RequestAuthentication</code>)
* Has some service paths without <code>AuthorizationPolicy</code> applied.</p><p>For the service paths that both conditions are met, an incoming request with a JWT token, and th