 policy when using the <code>hosts</code> and <code>notHosts</code> fields.</p><p>The issue happens when mixing the 1.12.0/1.12.1 control plane with the 1.11 data plane and using the <code>hosts</code> or <code>notHosts</code> field in the authorization policy.</p><h3 id=mitigation>Mitigation</h3><ul><li>Upgrade to latest 1.12.2 or;</li><li>Do not mix the 1.12.0/1.12.1 control plane with 1.11 data plane if using <code>hosts</code> or <code>notHosts</code> field in authorization policy</li></ul><h2 id=credit