ISTIO-SECURITY-2026-007
Istio security advisory disclosing multiple Envoy CVEs including a remote crash in the OAuth2 HTTP filter with CVSS 7.5 and a Brotli vulnerability.
Takeaway: Patch Istio to version 1.31.2 to resolve Envoy vulnerabilities including GHSA-8vc2-jrm4-835w and CVE-2026-111497.
Also covered by: Istio News
This is a short summary of the publisher's article, written for platform and SRE engineers. The original remains the primary source.