Go/istio.io/istio CVE-2022-31045: medium 5.9, EPSS 1.18%
Ill-formed headers may lead to unexpected behavior in Istio
Action: Upgrade istio.io/istio to 1.12.18 or later.
go get istio.io/istio@v1.12.18go get istio.io/istio@v1.13.5go get istio.io/istio@v1.14.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.18 | - |
| 1.13.0 | 1.13.5 | - |
| 1.14.0 | 1.14.1 | - |
Fixed versions
| 1.12.18 | 1.13.5 | 1.14.1 |
Sources
- osv: GHSA-xwx5-5c9g-x68x
- https://github.com/istio/istio/security/advisories/GHSA-xwx5-5c9g-x68x
- https://nvd.nist.gov/vuln/detail/CVE-2022-31045
- https://github.com/istio/istio
- https://istio.io/latest/news/security/istio-security-2022-05
CVE-2022-31045 · published · modified · JSON