{"action":"Upgrade istio.io/istio to 1.1.13 or later.","affected":[{"fixed":"1.1.13","introduced":"0"},{"fixed":"1.2.4","introduced":"1.2.0"}],"component":"istio.io/istio","cve_ids":["CVE-2019-14993"],"ecosystem":"Go","epss":0.02294,"exploited":false,"fixed_versions":["1.1.13","1.2.4"],"ghsa_id":"GHSA-qcvw-82hh-gq38","id":"tcs_01M5KFJWTRAZXNC048JH5ACPM4","modified_at":"2026-09-10T03:48:20.430764488Z","published_at":"2022-05-24T16:53:16Z","references":["https://osv.dev/vulnerability/GHSA-qcvw-82hh-gq38","https://nvd.nist.gov/vuln/detail/CVE-2019-14993","https://github.com/envoyproxy/envoy/issues/7728","https://discuss.istio.io/t/upcoming-security-updates-in-istio-1-2-4-and-1-1-13/3383","https://gcc.gnu.org/bugzilla/show_bug.cgi?id=86164","https://istio.io/blog/2019/istio-security-003-004"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-qcvw-82hh-gq38","url":"https://osv.dev/vulnerability/GHSA-qcvw-82hh-gq38"}],"summary":"Istio ReDoS Vulnerability"}