A severe authentication bypass vulnerability discovered by Aspen Mesh in the open source Istio service mesh software has been remedied, and users are urged to update their working deployments as soon as possible. Aspen Mesh software engineer Ryan Sutton first noticed the issue while working on some authentication features for the company’s commercial service mesh package built on Istio.

Read full article on The New Stack