ai.h2o:h2o-core vulnerabilities
CVEs whose affected-version data names the ai.h2o:h2o-core package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
8 CVEsRSS
CVE-2024-10549High· 7.5H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint
H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint
▾ Twilighth2o · h2oEPSS 0.62%via OSV
CVE-2024-7768High· 7.5H2O Vulnerable to Denial of Service (DoS) via `/3/ImportFiles` Endpoint
H2O Vulnerable to Denial of Service (DoS) via `/3/ImportFiles` Endpoint
▾ Twilighth2o · h2oEPSS 0.77%via OSV
CVE-2024-6863Medium· 6.5H2O Vulnerable to Execution of Arbitrary Files
H2O Vulnerable to Execution of Arbitrary Files
▾ Sunlith2o · h2oEPSS 0.35%via OSV
CVE-2024-8616High· 8.2H2O Vulnerable to Arbitrary File Overwrite
H2O Vulnerable to Arbitrary File Overwrite
▾ Twilighth2o · h2oEPSS 0.55%via OSV
CVE-2024-10550High· 7.5H2O Vulnerable to Denial of Service (DoS) via `/3/ParseSetup` Endpoint
H2O Vulnerable to Denial of Service (DoS) via `/3/ParseSetup` Endpoint
▾ Twilighth2o · h2oEPSS 0.62%via OSV
CVE-2024-7765High· 7.5H2O Vulnerable to Denial of Service (DoS) via Large GZIP Parsing
H2O Vulnerable to Denial of Service (DoS) via Large GZIP Parsing
▾ Twilighth2o · h2oEPSS 0.76%via OSV
CVE-2024-8062High· 7.5H2O Vulnerable to Denial of Service (DoS) via `HEAD` Request
H2O Vulnerable to Denial of Service (DoS) via `HEAD` Request
▾ Twilighth2o · h2oEPSS 0.47%via OSV
CVE-2024-6854High· 7.1H2O Vulnerable to Arbitrary File Overwrite via File Export
H2O Vulnerable to Arbitrary File Overwrite via File Export
▾ Twilighth2o · h2oEPSS 0.76%via OSV