i?name=CVE-2021-31920">CVE-2021-31920</a></strong>:
Istio contains a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters (<code>%2F</code> or <code>%5C</code>) could potentially bypass an Istio authorization policy when path based authorization rules are used. See the <a href=/v1.19/news/security/istio-security-2021-005>ISTIO-SECURITY-2021-005 bulletin</a> for more details.<ul><li><strong>CVSS Score</strong>: 8.1 <a href="https://nvd.nist.gov/vuln-