</p><p>We keep the reporter updated as the status of the security issue moves
from <code>triaged</code>, to <code>identified fix</code>, to <code>release planning</code>.</p><h2 id=fixing-the-issue>Fixing the issue</h2><p>Once a security vulnerability has been fully characterized, a fix is developed by the Istio team.
The development and testing for the fix happens in a private GitHub repository in order to prevent
premature disclosure of the vulnerability.</p><h2 id=early-disclosure>Early disclosure</h2><p