title: Red Hat Security Advisory: Red Hat Single Sign-On 7.4.6 security update on RHEL 8
description: nodejs-angular: XSS due to regex-based HTML replacement keycloak: reusable "state" parameter at redirect_uri endpoint enables possibility of replay attacks
cpes: cpe:/a:redhat:red_hat_single_sign_on:7::el8