title: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.7.1 security update
description: envoyproxy/envoy: HTTP request with multiple value headers can bypass authorization policies envoyproxy/envoy: HTTP request with a URL fragment in the URI can bypass authorization policies envoyproxy/envoy: denial of service when using extensions that modify request or response sizes istio/istio: HTTP request can bypass authorization mechanisms due to case insensitive host comparison istio/istio: HTTP request with fragment in URI can bypass authorization mechanisms
cpes: cpe:/a:redhat:service_mesh:2.0::el8