s/security/istio-security-2021-005/>ISTIO-SECURITY-2021-005</a></td><td>May 11, 2021</td><td>All releases prior to 1.8.6<br>1.9.0 to 1.9.4<br></td><td class=score><a href="https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV%3aN%2fAC%3aL%2fPR%3aL%2fUI%3aN%2fS%3aU%2fC%3aH%2fI%3aH%2fA%3aN&version=3.1">8.1</a></td><td>HTTP request paths with multiple slashes or escaped slash characters may bypass path based authorization rules</td></tr><tr><td style=white-space:nowrap><a href=/v1.25/news/security/ist