Search for packages
Package details: pkg:golang/istio.io/istio@1.2.9
purl pkg:golang/istio.io/istio@1.2.9
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-qzf4-cp5y-aaaq
Aliases:
CVE-2019-18802
CVE-2019-18802 envoy: malformed request header may cause bypass of route matchers resulting in escalation of privileges or information disclosure There are no reported fixed by versions.
VCID-w3w7-upq4-aaam
Aliases:
CVE-2019-18801
CVE-2019-18801 envoy: an untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1 There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version