June 03, 2026

1.27.x Announcement 1.28.7-asm.3 is now available for in-cluster Cloud Service Mesh. For details on upgrading Cloud Service Mesh, see Upgrade Cloud Service Mesh . Cloud Service Mesh 1.28.7-asm.3 uses Envoy v1.36.7-dev. Fixed Patch 1.28.7-asm.3 contains fixes for the following platform CVEs: CVE Proxy Control Plane Distroless CNI Severity CVE-2026-27143 Yes Yes Yes Yes Critical (9.8) CVE-2026-31789 Yes Yes No Yes Low (9.8) CVE-2026-27140 Yes Yes Yes Yes High (8.8) CVE-2026-28387 Yes Yes No Yes…