HIGH7.1PyPIMaven
GHSA-47f6-5p7h-5f3h· CVE-2024-6854, PYSEC-2026-1436H2O Vulnerable to Arbitrary File Overwrite via File Export
Modified: 7/7/2026
package
PyPI/h2o
pkg:pypi/h2o
HIGH7.5PyPI
GHSA-58m3-rcvp-f9ww· CVE-2024-5979, PYSEC-2026-1437h2o vulnerable to unexpected POST request shutting down server
Modified: 7/7/2026
HIGH7.5PyPIMaven
GHSA-5c8j-g96x-cj78· CVE-2024-8062, PYSEC-2026-1438H2O Vulnerable to Denial of Service (DoS) via `HEAD` Request
Modified: 7/7/2026
CRITICAL9.8MavenPyPI
GHSA-5w3j-gwgh-4rfv· CVE-2025-6544, PYSEC-2026-349H2O affected by a deserialization vulnerability
Modified: 6/29/2026
HIGH7.5PyPIMaven
GHSA-6w62-3jvj-mfj6· CVE-2024-7765, PYSEC-2026-1439H2O Vulnerable to Denial of Service (DoS) via Large GZIP Parsing
Modified: 7/7/2026
HIGH7.5PyPIMaven
GHSA-7qq7-pvm9-x8rf· CVE-2024-10550, PYSEC-2026-1440H2O Vulnerable to Denial of Service (DoS) via `/3/ParseSetup` Endpoint
Modified: 7/7/2026
HIGH8.2PyPIMaven
GHSA-g48v-3p35-88jr· CVE-2024-8616, PYSEC-2026-1441H2O Vulnerable to Arbitrary File Overwrite
Modified: 7/7/2026
CRITICAL9.3PyPI
GHSA-gqrq-j6pm-98c2· CVE-2023-6569, PYSEC-2026-350External Control of File Name or Path in h2oai/h2o-3
Modified: 6/29/2026
CRITICAL9.8PyPIMaven
GHSA-h7xg-cmpp-48hf· CVE-2024-10553, PYSEC-2026-351H2O Deserialization of Untrusted Data Vulnerability
Modified: 6/29/2026
CRITICAL9.1MavenPyPI
GHSA-hrmc-jmp7-mpm2· CVE-2024-45758, PYSEC-2026-352H2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL
Modified: 6/29/2026
MEDIUM6.5PyPIMaven
GHSA-m37h-8r48-2cxj· CVE-2024-6863, PYSEC-2026-1442H2O Vulnerable to Execution of Arbitrary Files
Modified: 7/7/2026
HIGH7.5PyPIMaven
GHSA-p2vc-m5fv-9w9m· CVE-2024-7768, PYSEC-2026-1443H2O Vulnerable to Denial of Service (DoS) via `/3/ImportFiles` Endpoint
Modified: 9/10/2026
CRITICAL9.1MavenPyPI
GHSA-wj3h-wx8g-x699· CVE-2024-5986, PYSEC-2026-353H2O has an External Control of File Name or Path vulnerability
Modified: 6/29/2026
HIGH7.5PyPIMaven
GHSA-wjpv-64v2-2qpq· CVE-2024-10572, PYSEC-2026-1444H2O Vulnerable to Denial of Service (DoS) and File Write
Modified: 7/7/2026
HIGH7.5PyPIMaven
GHSA-wwr9-4gmr-xvq9· CVE-2024-10549, PYSEC-2026-1445H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint
Modified: 7/7/2026
MEDIUM5.3PyPI
GHSA-x234-r5fg-x52m· CVE-2024-5550, PYSEC-2026-1446Arbitrary system path lookup in h20
Modified: 7/7/2026
HIGH7.1PyPI
PYSEC-2026-1436· CVE-2024-6854, GHSA-47f6-5p7h-5f3hH2O Vulnerable to Arbitrary File Overwrite via File Export
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1437· CVE-2024-5979, GHSA-58m3-rcvp-f9wwh2o vulnerable to unexpected POST request shutting down server
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1438· CVE-2024-8062, GHSA-5c8j-g96x-cj78H2O Vulnerable to Denial of Service (DoS) via `HEAD` Request
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1439· CVE-2024-7765, GHSA-6w62-3jvj-mfj6H2O Vulnerable to Denial of Service (DoS) via Large GZIP Parsing
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1440· CVE-2024-10550, GHSA-7qq7-pvm9-x8rfH2O Vulnerable to Denial of Service (DoS) via `/3/ParseSetup` Endpoint
Modified: 7/7/2026
HIGH8.2PyPI
PYSEC-2026-1441· CVE-2024-8616, GHSA-g48v-3p35-88jrH2O Vulnerable to Arbitrary File Overwrite
Modified: 7/7/2026
MEDIUM6.5PyPI
PYSEC-2026-1442· CVE-2024-6863, GHSA-m37h-8r48-2cxjH2O Vulnerable to Execution of Arbitrary Files
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1443· CVE-2024-7768, GHSA-p2vc-m5fv-9w9mH2O Vulnerable to Denial of Service (DoS) via `/3/ImportFiles` Endpoint
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1444· CVE-2024-10572, GHSA-wjpv-64v2-2qpqH2O Vulnerable to Denial of Service (DoS) and File Write
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1445· CVE-2024-10549, GHSA-wwr9-4gmr-xvq9H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint
Modified: 7/7/2026
MEDIUM5.3PyPI
PYSEC-2026-1446· CVE-2024-5550, GHSA-x234-r5fg-x52mArbitrary system path lookup in h20
Modified: 7/7/2026
CRITICAL9.8PyPI
PYSEC-2026-2180· CVE-2026-3960, GHSA-qmcv-hh7c-3m56Modified: 7/13/2026
CRITICAL9.8PyPI
PYSEC-2026-349· CVE-2025-6544, GHSA-5w3j-gwgh-4rfvH2O affected by a deserialization vulnerability
Modified: 7/1/2026
CRITICAL9.3PyPI
PYSEC-2026-350· CVE-2023-6569, GHSA-gqrq-j6pm-98c2External Control of File Name or Path in h2oai/h2o-3
Modified: 7/1/2026
CRITICAL9.8PyPI
PYSEC-2026-351· CVE-2024-10553, GHSA-h7xg-cmpp-48hfH2O Deserialization of Untrusted Data Vulnerability
Modified: 7/1/2026
CRITICAL9.1PyPI
PYSEC-2026-352· CVE-2024-45758, GHSA-hrmc-jmp7-mpm2H2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL
Modified: 7/1/2026
CRITICAL9.1PyPI
PYSEC-2026-353· CVE-2024-5986, GHSA-wj3h-wx8g-x699H2O has an External Control of File Name or Path vulnerability
Modified: 7/1/2026