CRITICAL9.8PyPI
PYSEC-2026-354· CVE-2026-31234, GHSA-mf8f-x4r3-jm8cHorovod contains an insecure deserialization vulnerability in its KVStore HTTP server component
Modified: 7/1/2026
package
PyPI/horovod
pkg:pypi/horovod
CRITICAL9.8PyPI
PYSEC-2026-355· CVE-2024-10190, GHSA-mrhh-3ggq-23p2Horovod Vulnerable to Command Injection
Modified: 7/1/2026
HIGH8.2PyPI
GHSA-47wv-vhj2-g66m· CVE-2022-0315, PYSEC-2022-175Use of insecure temporary file in Horovod
Modified: 9/20/2024
CRITICAL9.8PyPI
GHSA-mf8f-x4r3-jm8c· CVE-2026-31234, PYSEC-2026-354Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component
Modified: 6/29/2026
CRITICAL9.8PyPI
GHSA-mrhh-3ggq-23p2· CVE-2024-10190, PYSEC-2026-355Horovod Vulnerable to Command Injection
Modified: 6/29/2026
—PyPI
PYSEC-2022-175· CVE-2022-0315, GHSA-47wv-vhj2-g66mModified: 11/8/2023