---
title: "Security Bulletins"
date: 2020-03-23T18:17:04-03:00
draft: false
hideIndex: true
---

Disclosed security vulnerabilities and their mitigation.

[cols="20%,15%,15%,50%",options="header"]
|===
|Disclosure
|Date
|Affected Releases
|Related

|link:/news/security-bulletins/kiali-security-001[KIALI-SECURITY-001]
|March 25, 2020
|0.4.0 to 1.15.0
|Authentication bypass using forged credentials.

|link:/news/security-bulletins/kiali-security-002[KIALI-SECURITY-002]
|March 5, 2021
|1.26.0, 1.26.1, 1.26.2, 1.27.0, 1.28.0, 1.28.1, 1.29.0, 1.29.1, 1.30.0
|Authentication bypass when using the `openid` login strategy.

|link:/news/security-bulletins/kiali-security-003[KIALI-SECURITY-003]
|May 11, 2021
|prior to 1.33.0
|Installation into ad-hoc namespaces.

|===
