="https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=CVSS%3a3.0%2fAV%3aN%2fAC%3aH%2fPR%3aN%2fUI%3aN%2fS%3aC%2fC%3aH%2fI%3aH%2fA%3aH">CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H</a></td></tr><tr><td>Affected Releases</td><td>1.2 to 1.2.9<br>1.3 to 1.3.5<br>1.4 to 1.4.1<br></td></tr></tbody></table><p>Envoy, and subsequently Istio are vulnerable to two newly discovered vulnerabilities:</p><ul><li><p><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18801">CVE-2019-18801</a></s