March 11, 2026

1.27.x Security 1.28.5-asm.9 is now available for in-cluster Cloud Service Mesh. This patch release contains fixes for the security vulnerabilities listed in GCP-2026-013 as well as fixes for the following platform CVEs: CVE Proxy Control Plane Distroless CNI Severity CVE-2025-13151 Yes Yes No Yes Medium (7.5) CVE-2025-14831 Yes Yes No Yes Medium (5.3) CVE-2025-15281 Yes Yes No Yes Medium (7.5) CVE-2025-15467 Yes Yes No Yes Medium (9.8) CVE-2025-15558 Yes Yes Yes - High (8.0) CVE-2025-61726 Yes…