Plan
archived
Apigee hybrid v1.15.8: multiple security fixes patched
- Platform/SRE — Plan: Teams running Apigee hybrid on Kubernetes should schedule an upgrade to v1.15.8, which patches several security issues: JWT refresh token revocation, HTTP 103 Early Hints response desynchronization, JavaCallout policy, and SSRF in AI protection policies. No KEV listing or active exploitation reported, so no immediate emergency, but the Helm chart upgrade path is straightforward.
- CI/CD — Skip
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.