EUVD-2019-13415

Malware in sbrugna...

EUVD-2022-29597

Malicious code in bioql PyPI...

CVE-2020-1762

CVE-2020-1762 affects Kiali versions 0.4.0 to 1.15.0; root cause is insufficient JWT validation. An attacker could steal a valid JWT cookie and use it to spoof a user session, potentially gaining privileges to view and alter Istio configuration. The issue was fixed in Kiali 1.15.1. Remediation is...