title: Red Hat Security Advisory: OpenShift Container Platform 4.7.0 security, bug fix, and enhancement update
description: nodejs-y18n: prototype pollution vulnerability kubernetes: Secret leaks in kube-controller-manager when using vSphere Provider containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters heketi: gluster-block volume password details available in logs golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash jwt-go: access restriction bypass vulnerability golang-github-gorilla-websocket: integer overflow leads to denial of service crewjam/saml: authentication bypass in saml authentication golang: math/big: panic during recursive division of very large numbers golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation sanitize-html: improper handling of internationalized domain name (IDN) can lead to bypass hostname whitelist validation
cpes: cpe:/a:redhat:openshift:4.7::el8