{"action":"Upgrade istio.io/istio to 1.1.7 or later.","affected":[{"fixed":"1.1.7","introduced":"1.1.0"}],"component":"istio.io/istio","cve_ids":["CVE-2019-12243"],"ecosystem":"Go","epss":0.01175,"exploited":false,"fixed_versions":["1.1.7"],"ghsa_id":"GHSA-6g5f-f5pm-mjrg","id":"tcs_01M5KF04FFGGQ55JPY2WDZWN0K","modified_at":"2023-11-08T04:01:03.200373Z","published_at":"2022-02-15T01:57:18Z","references":["https://osv.dev/vulnerability/GHSA-6g5f-f5pm-mjrg","https://nvd.nist.gov/vuln/detail/CVE-2019-12243","https://github.com/istio/istio/issues/13868","https://github.com/istio/istio/pull/13893/commits/91faba277439dab798185730d1624bd53e37bb06","https://istio.io/blog/2019/cve-2019-12243"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-6g5f-f5pm-mjrg","url":"https://osv.dev/vulnerability/GHSA-6g5f-f5pm-mjrg"}],"summary":"Istio may not check inbound TCP connections against istio-policy"}