November 9, 2026 · Google CloudAnnouncement
Cloud Service Mesh 1.31.3-asm.7 and 1.30.7-asm.7 fix GCP-2026-080 vulnerability
1.31.3-asm.7 is now available for in-cluster Cloud Service Mesh.
For details on upgrading Cloud Service Mesh, see Upgrade Cloud Service Mesh. Cloud Service Mesh 1.31.3-asm.7 uses Envoy v1.39.5-dev.
This release resolves the security vulnerability listed in Security Bulletin GCP-2026-080 (ISTIO-SECURITY-2026-009).
1.30.7-asm.7 is now available for in-cluster Cloud Service Mesh.
For details on upgrading Cloud Service Mesh, see Upgrade Cloud Service Mesh. Cloud Service Mesh 1.30.7-asm.7 uses Envoy v1.38.10-dev.
This release resolves the security vulnerability listed in Security Bulletin GCP-2026-080 (ISTIO-SECURITY-2026-009).
Text from the Google Cloud release notes, licensed under CC BY 4.0. Source: Google Cloud release notes.
Related updates
Cloud Service Mesh 1.31.3-asm.3, 1.30.7-asm.3 and 1.29.10-asm.0 fix GCP-2026-076
Cloud Service Mesh 1.31.1-asm.16 released, plus 1.30.5-asm.8 and 1.29.8-asm.8 fixes
Cloud Service Mesh 1.28 unsupported; 1.31.1, 1.30.5 and 1.29.8 patch releases available
GDC bare metal: corrected fix versions for Metrics API TLS errors after CA rotation