th very large URIs. After investigation, the Istio team has found that this issue could be leveraged for a DoS attack in Istio, if users are employing regular expressions in some of the Istio APIs: <code>JWT</code>, <code>VirtualService</code>, <code>HTTPAPISpecBinding</code>, <code>QuotaSpecBinding</code>.</p><h2 id=impact-and-detection>Impact and detection</h2><p>To detect if there is any regular expressions used in Istio APIs in your cluster, run the following command which prints either of the following