Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Project: IstioClear ×

Istio1.28.9Networking & MessagingJun 24, 2026

ACTION 7CHECK 7View full analysis

A maintenance release with disclosed Envoy security fixes across HTTP/3 processing, protocol handling, filters, decompression, certificates, and statistics. The corrections are available through an upgrade to this release.

Action needed (7)

securityhighCVE-2026-48044, Zstd decompressor ratio enforcement
CVE-2026-48044 fixes memory exhaustion in the Zstd decompressor by enforcing the MaxInflateRatio limit inside the decompression loop.
securitymediumCVE-2026-47692, PROXY protocol TLV length validation
CVE-2026-47692 fixes a length mismatch when passthrough TLVs and added TLVs exceed the maximum length in the PROXY protocol header.
securitymediumCVE-2026-47221, HTTP 303 body-less redirect handling
CVE-2026-47221 fixes a segmentation fault when handling HTTP 303 internal redirects for requests without a body.
securitymediumCVE-2026-48090, asynchronous token callback lifetime
CVE-2026-48090 fixes a callback that could run after the filter was torn down, preventing access to dangling pointers and the resulting use-after-free crash.
securitymediumCVE-2026-47778, peer certificate SAN validation
CVE-2026-47778 fixes validation of a peer certificate's Subject Alternative Name when the SAN contains an embedded NUL byte.
securitymediumCVE-2026-48497, query name length checking
CVE-2026-48497 adds sanity checking for query name length and uses ENVOY_BUG when the check fails, avoiding abnormal process termination.
securityGHSA-p7c7-7c47-pwch, QPACK blocked decoding fix
GHSA-p7c7-7c47-pwch fixes a denial-of-service vulnerability in Envoy's HTTP/3 stack caused by QPACK blocked decoding and unbounded memory growth.

Check if affected (7)

securityhighCVE-2026-48743, HTTP/3 headers-only content-length validation
Applies if you enable envoy.reloadable_features.quic_validate_headers_only_content_length.
CVE-2026-48743 validates content lengths for HTTP/3 headers-only requests and responses and resets the stream when the values are inconsistent. The change is guarded by the runtime flag envoy.reloadable_features.quic_validate_headers_only_content_length.
securityhighCVE-2026-48042, JSON parser nesting depth limit
Applies if you set envoy.reloadable_features.limit_json_parser_nesting_depth to false.
CVE-2026-48042 limits JSON nesting depth to 1000. The limit can be relaxed to 10K by setting envoy.reloadable_features.limit_json_parser_nesting_depth to false.
securitymediumCVE-2026-47207, ext_proc server response handling
Applies if you use the ext_proc server.
CVE-2026-47207 fixes unexpected ProcessingResponses sent by the ext_proc server to Envoy.
+ 4 more on the release page

Source ↗

Istio1.29.5Networking & MessagingJun 24, 2026

ACTION 4CHECK 11OTHER 5View full analysis

A maintenance release with Envoy security fixes and five ordinary defect corrections. The security fixes require upgrading, while no deprecations or forced operator configuration changes are announced.

Action needed (4)

securitymediumCVE-2026-47221 in HTTP 303 internal redirects
CVE-2026-47221 fixes handling of HTTP 303 internal redirects for body-less requests. The redirect code no longer attempts to drain an unallocated request body buffer.
securitymediumCVE-2026-48090 in asynchronous token change callbacks
CVE-2026-48090 fixes a bug where an asynchronous token change callback could run after the filter was torn down by onDestroy(), causing dangling-pointer access and a crash.
securitymediumCVE-2026-47778 in peer certificate SAN validation
CVE-2026-47778 fixes validation of a peer certificate's Subject Alternative Name when the SAN contains an embedded NUL byte. SAN parsing no longer permits NUL byte truncation to produce incorrect trust decisions.
securitymediumCVE-2026-48497 query name length checking
CVE-2026-48497 adds sanity checking for query name length to avoid abnormal process termination. The check uses ENVOY_BUG when it fails.

Check if affected (11)

securityhighCVE-2026-47220 in the %REQUESTED_SERVER_NAME% formatter
Applies if you configure the %REQUESTED_SERVER_NAME% formatter.
CVE-2026-47220 fixes a crash in the %REQUESTED_SERVER_NAME% formatter when the host or original host is not set correctly while the formatter accesses the host value.
securityhighCVE-2026-48044 in the Zstd decompressor
Applies if you use the Zstd decompressor.
CVE-2026-48044 fixes memory exhaustion in the Zstd decompressor. The MaxInflateRatio limit is now enforced inside the inner decompression loop.
securityhighCVE-2026-48743 HTTP/3 headers-only content-length validation
Applies if you use HTTP/3 and enable envoy.reloadable_features.quic_validate_headers_only_content_length.
CVE-2026-48743 fixes HTTP/3 content-length validation for headers-only requests and responses. Inconsistent content lengths now reset the stream, guarded by the runtime flag envoy.reloadable_features.quic_validate_headers_only_content_length.
+ 8 more on the release page

Source ↗

Istio1.30.2Networking & MessagingJun 24, 2026

ACTION 12CHECK 5OTHER 7View full analysis

A maintenance release with a changed logging default, operator-facing additions and fixes, and a restriction on pilot-agent metric content types. It also includes Envoy security fixes covering denial-of-service, crashes, validation issues, memory exhaustion, and other vulnerabilities.

Action needed (12)

securityhighCVE-2026-47220 crash bug fix
The Envoy security update fixes the crash bug described by CVE-2026-47220.
securityhighCVE-2026-48044 memory exhaustion fix
The Envoy security update fixes the memory exhaustion vulnerability described by CVE-2026-48044.
securityhighCVE-2026-48042 JSON nesting-depth limit
The Envoy security update limits JSON nesting depth to 1000 through envoy.reloadable_features.limit_json_parser_nesting_depth.
securitymediumCVE-2026-47692 bug fix
The Envoy security update fixes the bug described by CVE-2026-47692.
securitymediumCVE-2026-47205 use-after-free crash fix
The Envoy security update fixes the use-after-free crash described by CVE-2026-47205.
securitymediumCVE-2026-48090 asynchronous token callback handling
The Envoy security update fixes a bug where the asynchronous token change callback could be triggered after the filter had been torn down.
securitymediumCVE-2026-47778 Subject Alternative Name validation
The Envoy security update fixes an issue where Envoy could fail to validate the Subject Alternative Name (SAN).
securitymediumCVE-2026-47204 crash and use-after-free fix
The Envoy security update fixes a crash or use-after-free described by CVE-2026-47204.
securitymediumCVE-2026-48497 query name length checking
The Envoy security update fixes sanity checking of the query name length.
securitymediumCVE-2026-47775 padding oracle
The Envoy security update addresses a padding oracle described by CVE-2026-47775.
securityGHSA-p7c7-7c47-pwch denial-of-service fix
The Envoy security update fixes the denial-of-service vulnerability described by GHSA-p7c7-7c47-pwch.
breakingWarn-level message logging
The message is now logged at warn level.

Check if affected (5)

securityhighCVE-2026-48743 HTTP/3 content-length validation
Applies if you use HTTP/3.
The Envoy security update fixes HTTP/3 headers-only request and response content-length validation, including the envoy.reloadable_features.quic_validate_headers_only_content_length feature.
securitymediumCVE-2026-47207 ext_proc response handling
Applies if you use the ext_proc extension.
The Envoy security update fixes a bug where the ext_proc server sends unexpected ProcessingResponses to Envoy.
securitymediumCVE-2026-47221 HTTP 303 redirect handling
Applicability is not stated in the release notes.
The Envoy security update fixes an issue when handling HTTP 303 internal redirects.
+ 2 more on the release page

Source ↗

Istio1.29.4Networking & MessagingJun 4, 2026

ACTION 1OTHER 6View full analysis

A maintenance release with a security fix for Envoy and operator-relevant correctness fixes across Istio ambient, gateway, routing, and CNI behavior. It also adds automatic fallback from the nftables backend to iptables when the bundled nft binary lacks JSON support.

Action needed (1)

securityhighCVE-2026-47774 Envoy memory exhaustion fix
CVE-2026-47774 fixes an Envoy memory exhaustion issue in which specially crafted HTTP/2 requests could bypass request header size accounting and trigger excessive memory use. The fix ships in Envoy.

Source ↗

Istio1.28.8Networking & MessagingJun 4, 2026

ACTION 1OTHER 3View full analysis

A maintenance release with a disclosed Envoy denial-of-service fix and additional correctness fixes. The security fix addresses memory exhaustion from specially crafted HTTP/2 requests, while the other corrections do not require setup changes.

Action needed (1)

securityhighThe Envoy denial-of-service vulnerability CVE-2026-47774, fixed
CVE-2026-47774 fixes an Envoy denial-of-service vulnerability in which specially crafted HTTP/2 requests could cause excessive memory consumption. The fix accounts for cookie header bytes during request header size validation and limits total decoded header size in HPACK processing.

Source ↗

Istio1.30.1Networking & MessagingJun 4, 2026

ACTION 1CHECK 1OTHER 15View full analysis

A maintenance release with an Envoy denial-of-service security fix, defect corrections, new operator-facing capabilities, a dependency update, and removal of a feature-gate guard. The security fix addresses disclosed advisory CVE-2026-47774.

Action needed (1)

securityhighCVE-2026-47774 Envoy denial-of-service fix
The fix addresses CVE-2026-47774 in Envoy, where specially crafted HTTP/2 requests could exhaust process memory because decoded header size was not fully limited during request validation.

Check if affected (1)

breakingPILOT_ENABLE_ALPHA_GATEWAY_API guard removed from ListenerSet
Applies if you use the ListenerSet API.
The ListenerSet feature is no longer guarded by the PILOT_ENABLE_ALPHA_GATEWAY_API feature flag because it is no longer experimental in Gateway API v1.5.0.

Source ↗

Istio1.29.3Networking & MessagingMay 18, 2026

ACTION 1CHECK 2OTHER 6View full analysis

A maintenance release adds Gateway API compatibility, analyzer and HBONE tuning capabilities, and fixes certificate, controller, probe, output, and authorization issues. The authorization fixes address cross-namespace configuration access and regex handling in AuthorizationPolicy.

Action needed (1)

securityCross-namespace access to istio.io/debug/syncz and istio.io/debug/config_dump
Authorization is fixed so an authenticated workload cannot enumerate proxies or retrieve configuration dumps for workloads in other namespaces through istio.io/debug/syncz and istio.io/debug/config_dump.

Check if affected (2)

securityRegex handling in AuthorizationPolicy identity fields
Applicability is not stated in the release notes.
AuthorizationPolicy no longer embeds unescaped regex metacharacters from certain identity fields in the generated Envoy SafeRegex. This fixes the resulting authorization bypass.
breakingThe AMBIENT_ENABLE_AWS_BRANCH_ENI_PROBE setting and kubelet health probes
Applies when ambient mesh pods run on AWS EKS and use Security Groups for Pods (branch ENI).
istio-cni fixes kubelet health probe failures for ambient mesh pods on AWS EKS when using Security Groups for Pods (branch ENI). The fix covers the AMBIENT_ENABLE_AWS_BRANCH_ENI_PROBE capability.

Source ↗

Istio1.28.7Networking & MessagingMay 18, 2026

ACTION 1CHECK 1OTHER 6View full analysis

A maintenance release that adds Gateway API v1.4.1 support and new diagnostics and configuration controls while fixing several correctness issues. It also includes two described security fixes for XDS debug endpoint authorization and regex handling in AuthorizationPolicy.

Action needed (1)

securitySame-namespace authorization for StatusGen XDS debug endpoints
The StatusGen-served XDS debug endpoints istio.io/debug/syncz and istio.io/debug/config_dump now enforce same-namespace authorization for non-system callers. Authenticated workloads can no longer enumerate proxies or retrieve configuration dumps for workloads in other namespaces.

Check if affected (1)

securityEscaped regex metacharacters in AuthorizationPolicy identity fields
Applies if you configure source.principals or source.namespaces.
AuthorizationPolicy now escapes regex metacharacters in identity fields before embedding them in generated Envoy SafeRegex expressions. This prevents characters such as . or [ in legal Kubernetes names from being treated as regex wildcards in source.principals suffix matches and source.namespaces.

Source ↗

Istio1.29.1Networking & MessagingMar 10, 2026

ACTION 1CHECK 10OTHER 9View full analysis

A maintenance release with multiple Envoy and Istio security fixes covering request handling, authorization, authentication, and plugin image fetching. It also includes ordinary correctness fixes and adds configuration for authorized namespaces on debug endpoints.

Action needed (1)

securitymediumCVE-2026-26309 JSON off-by-one write fix
CVE-2026-26309 fixes an off-by-one write in JSON handling.

Check if affected (10)

securityhighCVE-2026-26308 multivalue header bypass fix
Applies if you use RBAC.
CVE-2026-26308 fixes a multivalue header bypass in RBAC.
securityhighCVE-2026-31837 and GHSA-v75c-crr9-733c JWKS resolver authentication fix
Applies if you use JWKS Resolver.
CVE-2026-31837 and GHSA-v75c-crr9-733c fix the JWKS Resolver failure that could allow authentication bypass using known default keys.
securitymediumCVE-2026-26311 HTTP decode method restriction
Applies if you use HTTP.
CVE-2026-26311 blocks HTTP decode methods after a downstream reset.
+ 7 more on the release page

Source ↗

Istio1.28.5Networking & MessagingMar 10, 2026

ACTION 7CHECK 3OTHER 2View full analysis

A security-focused maintenance release with fixes for disclosed Envoy and Istio vulnerabilities, including authentication, authorization, parsing, and crash defects. It also adds namespace authorization for debug endpoints and fixes lost InferencePool configurations during VirtualService merging.

Action needed (7)

securityhighCVE-2026-26308 multivalue header bypass fix in RBAC
CVE-2026-26308 fixes a multivalue header bypass in RBAC in Istio.
securityhighCVE-2026-31837 and GHSA-v75c-crr9-733c JWKS resolver authentication fix
CVE-2026-31837 and GHSA-v75c-crr9-733c fix a JWKS resolver failure that may allow authentication bypass using known default keys.
securitymediumCVE-2026-26311 HTTP decode method fix
CVE-2026-26311 blocks HTTP decode methods after a downstream reset in Istio.
securitymediumCVE-2026-26310 scoped IPv6 address crash fix
CVE-2026-26310 fixes a crash in getAddressWithPort() when processing a scoped IPv6 address in Istio.
securitymediumCVE-2026-26309 JSON off-by-one write fix
CVE-2026-26309 fixes a JSON off-by-one write in Istio.
securitymediumCVE-2026-26330 ratelimit response phase crash fix
CVE-2026-26330 fixes a crash in the ratelimit response phase in Istio.
securitymediumCVE-2026-31838 and GHSA-974c-2wxh-g4ww debug endpoint authorization fix
CVE-2026-31838 and GHSA-974c-2wxh-g4ww address cross-namespace proxy data access through debug endpoints.

Check if affected (3)

securityAuthentication for XDS debug endpoints on port 15010
Applies if you expose XDS debug endpoints.
XDS debug endpoints on plaintext port 15010 now require authentication, preventing unauthenticated access to proxy configuration.
securityBearer token realm URL validation for WasmPlugin image fetching
Applies if you use WasmPlugin image fetching.
WasmPlugin image fetching now validates bearer token realm URLs to fix a potential SSRF.
securityNamespace-based authorization for HTTP debug endpoints on port 15014
Applies if you expose HTTP debug endpoints.
HTTP debug endpoints on port 15014 now enforce namespace-based authorization, preventing cross-namespace proxy data access.

Source ↗

Istio1.27.8Networking & MessagingMar 10, 2026

ACTION 3CHECK 6OTHER 1View full analysis

A security-focused release with fixes across Envoy and Istio, including additional protections for debug endpoints, JWKS resolution, and WasmPlugin image fetching. The security fixes require an upgrade, while authorized namespace configuration for debug endpoints is optional.

Action needed (3)

securitymediumCVE-2026-26311 HTTP decode method correction
CVE-2026-26311 blocks HTTP decode methods after a downstream reset.
securitymediumCVE-2026-26310 scoped IPv6 address crash fix
CVE-2026-26310 fixes a crash in getAddressWithPort() when handling a scoped IPv6 address.
securitymediumCVE-2026-26309 JSON off-by-one write fix
CVE-2026-26309 fixes a JSON off-by-one write.

Check if affected (6)

securityhighCVE-2026-26308 multivalue header bypass fix
Applies if you use RBAC.
CVE-2026-26308 fixes a multivalue header bypass in RBAC.
securityhighCVE-2026-31837 and GHSA-v75c-crr9-733c JWKS Resolver authentication fix
Applies if you use JWKS Resolver.
CVE-2026-31837 and GHSA-v75c-crr9-733c fix a JWKS Resolver failure that could allow authentication bypass using known default keys.
securitymediumCVE-2026-31838 and GHSA-974c-2wxh-g4ww debug endpoint access fix
Applies if you use Debug Endpoints.
CVE-2026-31838 and GHSA-974c-2wxh-g4ww address cross-namespace proxy data access through debug endpoints.
+ 3 more on the release page

Source ↗

Istio1.28.4Networking & MessagingFeb 16, 2026

ACTION 1CHECK 4OTHER 7View full analysis

A maintenance release focused on security fixes, validation, and authorization changes across Istio control-plane and endpoint handling. It also includes operator-facing capability changes and corrections for other defects.

Action needed (1)

securityhighCVE-2025-61732 cgo comment parsing flaw
This release fixes a discrepancy between Go and C/C++ comment parsing that allowed code smuggling into the resulting cgo binary.

Check if affected (4)

securitycriticalCVE-2025-68121 TLS session resumption validation
Applies if you use Config.Clone with mutations or Config.GetConfigForClient.
This release fixes crypto/tls session resumption when ClientCAs or RootCAs change between the initial and resumed handshake. The fix covers configurations using Config.Clone with mutations or Config.GetConfigForClient.
securityGateway deployment controller resource validation
Applies if the gateway deployment controller runs.
This release adds safeguards to the gateway deployment controller that validate object types, names, and namespaces before creating Kubernetes resources. The validation prevents arbitrary resource creation through template injection.
securityResource annotation validation against container injection
Applies if you configure resource annotations.
This release updates resource annotation validation to reject newlines and control characters. The change prevents template rendering from injecting containers into pod specifications.
+ 1 more on the release page

Source ↗

Istio1.27.7Networking & MessagingFeb 16, 2026

ACTION 2View full analysis

A security release addressing two vulnerabilities in cgo comment parsing and crypto/tls session resumption. The fixes are relevant to deployments using the affected Go functionality.

Action needed (2)

securitycriticalCVE-2025-68121 session resumption vulnerability correction
CVE-2025-68121 corrects a crypto/tls session resumption flaw that could let resumed handshakes succeed after ClientCAs or RootCAs changed between the initial and resumed handshake.
securityhighCVE-2025-61732 code-smuggling vulnerability correction
CVE-2025-61732 addresses a discrepancy in Go and C/C++ comment parsing that allowed code smuggling into the resulting cgo binary.

Source ↗

Istio1.27.6Networking & MessagingFeb 10, 2026

ACTION 1CHECK 2OTHER 2View full analysis

This release includes security safeguards for gateway resource creation and pod specification rendering, along with stricter authorization for debug endpoints. It also adds a Helm configuration field and corrects a TLS configuration mapping.

Action needed (1)

securityResource annotation validation
Resource annotation validation now rejects newline and control characters that could inject containers into pod specifications through template rendering.

Check if affected (2)

securityGateway deployment controller resource validation
Applies if the gateway deployment controller runs.
The gateway deployment controller now validates object types, names, and namespaces before creating Kubernetes resources through template rendering. This prevents arbitrary resource creation through template injection.
breakingNamespace-based authorization for debug endpoints
Applies if you use debug endpoints on port 15014.
Namespace-based authorization now restricts non-system access on port 15014 to the config_dump, ndsz, and edsz endpoints and to same-namespace proxies. Compatibility behavior can be disabled with ENABLE_DEBUG_ENDPOINT_AUTH=false.

Source ↗

Browse by month