Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.14",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "openshift4/ose-oauth-server-rhel8",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1791839120",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.14::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.15",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "openshift4/ose-oauth-server-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1791598539",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.15::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.18",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "openshift4/ose-oauth-server-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1790882323",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.18::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.19",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "openshift4/ose-oauth-server-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1790611633",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.19::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.20",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "openshift4/ose-oauth-server-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1790702087",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.20::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.21",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "openshift4/ose-oauth-server-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1790707106",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.21::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift Container Platform 4.22",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "openshift4/ose-oauth-server-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1790713150",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift:4.22::el9"
                    ]
                }