3aU%2fC%3aH%2fI%3aL%2fA%3aN">AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N</a></td></tr><tr><td>Affected Releases</td><td>1.9.0<br></td></tr></tbody></table><p>Envoy, and subsequently Istio, is vulnerable to a newly discovered vulnerability:</p><ul><li><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21378">CVE-2021-21378</a></strong>:
JWT authentication bypass with unknown issuer token<ul><li>CVSS Score: 8.2 <a href=https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C: