d></tr><tr><td>CVSS Impact Score</td><td>7.5 <a href="https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=CVSS%3a3.0%2fAV%3aN%2fAC%3aL%2fPR%3aN%2fUI%3aN%2fS%3aU%2fC%3aN%2fI%3aN%2fA%3aH%2fE%3aF%2fRL%3aO%2fRC%3aC">CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C</a></td></tr><tr><td>Affected Releases</td><td>1.0 to 1.0.8<br>1.1 to 1.1.9<br>1.2 to 1.2.1<br></td></tr></tbody></table><p>A bug in Istio’s JWT validation filter causes Envoy to crash in certain cases when the request contains a m