NIXPKGS-2026-0617

GitHub issue published on

Permalink CVE-2026-31837

updated 1 month, 4 weeks ago by @mweinelt Activity log

Created suggestion 1 month, 4 weeks ago
@mweinelt accepted 1 month, 4 weeks ago
@mweinelt published on GitHub 1 month, 4 weeks ago

Istio JWKS resolver to prevent private key material from being exposed when JWKS fetch fails.

Istio is an open platform to connect, manage, and secure microservices. Prior to 1.29.1, 1.28.5, and 1.27.8, a user of Istio is impacted if the JWKS resolver becomes unavailable or the fetch fails, exposing hardcoded defaults regardless of use of the RequestAuthentication resource. This vulnerability is fixed in 1.29.1, 1.28.5, and 1.27.8.

References

https://github.com/istio/istio/security/advisories/GHSA-v75c-crr9-733c x_refsource_CONFIRM

Affected products

istio

==< 1.27.8
==>= 1.29.0-alpha.0, < 1.29.1
==>= 1.28.0-alpha.0, < 1.28.5

Matching in nixpkgs

pkgs.istioctl

Istio configuration command line utility for service operators to debug and diagnose their Istio mesh

nixos-unstable 1.28.3
- nixpkgs-unstable 1.28.3
- nixos-unstable-small 1.28.3
nixos-25.11 1.28.0
- nixos-25.11-small 1.28.0
- nixpkgs-25.11-darwin 1.28.0

Package maintainers

@veehaitch Vincent Haupert <mail@vincent-haupert.de>
@bryanasdev000 Bryan Albuquerque <bryanasdev000@gmail.com>
@ryan4yin Ryan Yin <xiaoyin_c@qq.com>

https://github.com/istio/istio/security/advisories/GHSA-v75c-crr9-733c

Nixpkgs security tracker

Details of issue NIXPKGS-2026-0617

References

Affected products

Matching in nixpkgs

pkgs.istioctl

Package maintainers