Istio AuthorizationPolicy Bypass: HTTP/2 Method-Case Bug
Istio AuthorizationPolicy rules that block or allow traffic by HTTP method just got a real asterisk. ISTIO-SECURITY-2026-007 fixes a case bug in that matcher. Published October 15, 2026, it covers one specific issue: an HTTP/2 request with a lowercased method… Read moreIstio AuthorizationPolicy Bypass: HTTP/2 Method-Case Bug