pril 7, 2021)" href=/v1.9/news/security/istio-security-2021-002/>ISTIO-SECURITY-2021-002</a></li><li role=none><a role=treeitem title="JWT authentication can be bypassed when AuthorizationPolicy is misused (March 1, 2021)" href=/v1.9/news/security/istio-security-2021-001/>ISTIO-SECURITY-2021-001</a></li><li role=none><a role=treeitem title="Envoy incorrectly restores the proxy protocol downstream address for non-HTTP connections (November 21, 2020)" href=/v1.9/news/security/istio-security-2020-011/>ISTIO-SE