title: Red Hat Security Advisory: OpenShift Container Platform 4.9.0 bug fix and security update
description: gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation sanitize-html: improper handling of internationalized domain name (IDN) can lead to bypass hostname whitelist validation sanitize-html: improper validation of hostnames set by the "allowedIframeHostnames" option can lead to bypass hostname whitelist for iframe element nodejs-is-svg: ReDoS via malicious string nodejs-is-svg: Regular expression denial of service if the application is provided and checks a crafted invalid SVG string golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header helm: information disclosure vulnerability golang: x/net/html: infinite loop in ParseFragment golang: net: lookup functions may return invalid host names golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents golang: crypto/tls: certificate of wrong type is causing TLS client to panic
cpes: cpe:/a:redhat:openshift:4.9::el8