y update</h2><ul><li><strong>ISTIO-SECURITY-2020-004</strong> Istio uses a hard coded <code>signing_key</code> for Kiali.</li></ul><p><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1764">CVE-2020-1764</a></strong>: Istio uses a default <code>signing key</code> to install Kiali. This can allow an attacker with access to Kiali to bypass authentication and gain administrative privileges over Istio.
In addition, another CVE is fixed in this release, described in the Kiali 1.15.1 <a hre