on can be bypassed when AuthorizationPolicy is misused</td></tr><tr><td style=white-space:nowrap><a href=/v1.25/news/security/istio-security-2020-011/>ISTIO-SECURITY-2020-011</a></td><td>November 21, 2020</td><td>1.8.0<br></td><td class=score><a href="https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=&version=3.1">N/A</a></td><td>Envoy incorrectly restores the proxy protocol downstream address for non-HTTP connections</td></tr><tr><td style=white-space:nowrap><a href=/v1.25/news/security/istio-sec