Go/istio.io/istio CVE-2026-41413: medium 5, EPSS 0.33%

Istio: SSRF via RequestAuthentication jwksUri

Action: Upgrade istio.io/istio to 0.0.0-20260410004459-189832a289c1 or later.

go get istio.io/istio@v0.0.0-20260410004459-189832a289c1

Affected

Fixed versions

Sources

• osv: GHSA-fgw5-hp8f-xfhc
• https://github.com/istio/istio/security/advisories/GHSA-fgw5-hp8f-xfhc
• https://nvd.nist.gov/vuln/detail/CVE-2026-41413
• https://github.com/istio/istio
• https://github.com/istio/istio/releases/tag/1.28.6
• https://github.com/istio/istio/releases/tag/1.29.2

CVE-2026-41413 · published 2026-04-16T21:38:09Z · modified 2026-09-10T03:50:44.188184094Z · JSON