aH%2fA%3aN&version=3.1">7.4</a></td><td>Mixer policy check bypass caused by improperly accepting certain request headers</td></tr><tr><td style=white-space:nowrap><a href=/v1.25/news/security/istio-security-2019-007/>ISTIO-SECURITY-2019-007</a></td><td>December 10, 2019</td><td>1.2 to 1.2.9<br>1.3 to 1.3.5<br>1.4 to 1.4.1<br></td><td class=score><a href="https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV%3aN%2fAC%3aH%2fPR%3aN%2fUI%3aN%2fS%3aC%2fC%3aH%2fI%3aH%2fA%3aH&version=3.0">9.0</a></td><td>