pkg:PyPI/h2o

All known vulnerabilities

• CRITICAL9.8CVE-2026-3960H2O-3 is Vulnerable to Code Injection
  from 0, < 3.46.0.10
• CRITICAL9.8CVE-2025-6544H2O affected by a deserialization vulnerability
  from 0, <= 3.46.0.7
• CRITICAL9.8CVE-2024-10553H2O Deserialization of Untrusted Data Vulnerability
  from 0, < 3.46.0.6
• CRITICAL9.3External Control of File Name or Path in h2oai/h2o-3
  from 0, < 3.46.0.1
• CRITICAL9.1H2O has an External Control of File Name or Path vulnerability
  from 0, <= 3.46.0.1
• CRITICAL9.1H2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL
  from 0, <= 3.46.0.7
• HIGH7.5h2o vulnerable to unexpected POST request shutting down server
  from 0, <= 3.46.0
• HIGH7.5h2o vulnerable to unexpected POST request shutting down server
  from 0, <= 3.46.0
• MEDIUM5.3Arbitrary system path lookup in h20
  from 0, <= 3.40.0.4
• MEDIUM5.3Arbitrary system path lookup in h20
  from 0, <= 3.40.0.4