CLEANSTART-2026-GD10985: Security fix for GHSA-2hw4-c9m4-f2fj applied in: knative-net-istio 1.20.4-r16
Security vulnerability affects the knative-net-istio package. This issue is resolved in later releases. See references for vulnerability details.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/knative-net-istioto a version that resolves this vulnerability.Fixed in 1.20.4-r16 - Upgrade
Upgrade
knative-net-istioto a version that resolves this vulnerability.Fixed in 1.20.4-r16
Event History
Frequently Asked Questions
Which release includes the security fix?
The fix is applied in knative-net-istio 1.20.4-r16. The advisory states that later releases also resolve the issue.
What does an attacker need to exploit this issue?
The reported vector indicates network access, low attack complexity, and low privileges are required. No user interaction is required.
What is the expected security impact?
The reported impact is high availability impact, with no reported confidentiality or integrity impact. The vulnerability has a medium severity score of 6.5.