Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:50:47 +0000 CVE-2026-31837 — Istio JWKS resolver to prevent private key material from being exposed when JWKS fetch fails. https://vulnerability.circl.lu/vuln/cve-2026-31837 <p><strong>Affected:</strong> istio, Red Hat OpenShift AI 2.25, Red Hat OpenShift Service Mesh 3.0, Red Hat OpenShift Service Mesh 3.1, Red Hat OpenShift Service Mesh 3.2, Red Hat cert-manager Operator for Red Hat OpenShift, Red Hat ExternalDNS Operator, Red Hat OpenShift Serverless, Red Hat OpenShift Service Mesh 2, Red Hat OpenShift Service Mesh 3 and 3 more</p> <p>Istio is an open platform to connect, manage, and secure microservices. Prior to 1.29.1, 1.28.5, and 1.27.8, a user of Istio is impacted if the JWKS resolver becomes unavailable or the fetch fails, exposing hardcoded defaults regardless of use of the RequestAuthentication resource. This vulnerability is fixed in 1.29.1, 1.28.5, and 1.27.8.</p> <p><strong>Affected:</strong> istio, Red Hat OpenShift AI 2.25, Red Hat OpenShift Service Mesh 3.0, Red Hat OpenShift Service Mesh 3.1, Red Hat OpenShift Service Mesh 3.2, Red Hat cert-manager Operator for Red Hat OpenShift, Red Hat ExternalDNS Operator, Red Hat OpenShift Serverless, Red Hat OpenShift Service Mesh 2, Red Hat OpenShift Service Mesh 3 and 3 more</p> <p>Istio is an open platform to connect, manage, and secure microservices. Prior to 1.29.1, 1.28.5, and 1.27.8, a user of Istio is impacted if the JWKS resolver becomes unavailable or the fetch fails, exposing hardcoded defaults regardless of use of the RequestAuthentication resource. This vulnerability is fixed in 1.29.1, 1.28.5, and 1.27.8.</p> https://vulnerability.circl.lu/vuln/cve-2026-31837