egardless of the <code>trigger_rules</code> in the JWT specification. Thus, this bug makes Envoy vulnerable to a potential DoS attack.</p><p>This vulnerability is referred to as <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12995">CVE 2019-12995</a></p><h2 id=affected-istio-releases>Affected Istio releases</h2><p>The following Istio releases are vulnerable:</p><ul><li>1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8</li><li>1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7, 