Skip to contentH2oai H2o-3 vulnerabilities
- h2o, h2oai h2o-3 +1 moreh2oai h2o-3 Rapids setproperty Primitive AstSetProperty.java exec access controlCVE-2026-87526.9 Medium
- h2o, h2oai h2o-3 +1 moreh2oai h2o-3 JAR Model.java importBinaryModel deserializationCVE-2026-87516.9 Medium
- h2o, h2oai h2o-3 +1 moreh2oai h2o-3 ImportFile API PersistNFS.java importFiles information disclosureCVE-2026-87506.9 Medium
- h2o, h2oai h2oai/h2o-3 +1 moreRemote Code Execution in h2oai/h2o-3CVE-2026-3960Fix available5.9 Medium
- h2oai h2oai/h2o-3Remote Arbitrary File Write with Arbitrary Data in h2oai/h2o-3CVE-2024-59869.1 Critical
- h2o, h2oai h2o-3 +1 moreh2oai h2o-3 H2 JDBC Driver ImportSQLTable deserializationCVE-2025-107695.3 Medium
- h2o, h2oai h2o-3 +1 moreh2oai h2o-3 IBMDB2 JDBC Driver ImportSQLTable deserializationCVE-2025-107685.3 Medium
- h2o, h2oai h2oai/h2o-3 +1 moreDeserialization Vulnerability in h2oai/h2o-3CVE-2025-65449.8 Critical
- h2oai h2oai/h2o-3Deserialization Vulnerability in h2oai/h2o-3CVE-2025-56629.8 Critical
- h2oai h2oai/h2o-3Deserialization of Untrusted Data in h2oai/h2o-3CVE-2025-6507EPSS 17.3%9.8 Critical
- h2o, h2oai h2oai/h2o-3 +1 moreDenial of Service by ReDOS in h2oai/h2o-3CVE-2024-105497.5 High
- h2o, h2oai h2oai/h2o-3 +1 moreDenial of Service in h2oai/h2o-3CVE-2024-80627.5 High
- h2o, h2oai h2oai/h2o-3 +1 moreDenial of Service in h2oai/h2o-3CVE-2024-77687.5 High
- h2o, h2oai h2oai/h2o-3 +1 moreEncryption of Arbitrary Files with Attacker-Controlled Key in h2oai/h2o-3CVE-2024-68636.5 Medium
- h2o, h2oai h2oai/h2o-3 +1 moreArbitrary File Overwrite in h2oai/h2o-3CVE-2024-86168.2 High
- h2o, h2oai h2oai/h2o-3 +1 moreDenial of Service by ReDOS in h2oai/h2o-3CVE-2024-105507.5 High
- h2o, h2oai h2oai/h2o-3 +1 moreArbitrary File Overwrite in h2oai/h2o-3CVE-2024-68547.1 High
- h2o, h2oai h2oai/h2o-3 +1 moreDenial of Service and Arbitrary File Write in h2oai/h2o-3CVE-2024-105727.5 High
- h2o, h2oai h2oai/h2o-3 +1 moreJdbc Deserialization in h2oai/h2o-3CVE-2024-10553Fix available9.8 Critical
- h2o, h2oai h2oai/h2o-3 +1 moreDenial of Service in h2oai/h2o-3CVE-2024-77657.5 High
- h2o, h2oai h2o-3 +1 moreh2oai h2o-3 JDBC Connection 1 getConnectionSafe deserializationCVE-2024-8862Fix available6.9 Medium
- h2o, h2oai h2o-3 +1 moreH2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URLCVE-2024-457589.1 Critical
- h2o, h2oai h2oai/h2o-3, h2oai\/h2o-3 +2 moreDenial of Service via Invalid Argument in h2oai/h2o-3CVE-2024-59797.5 High
- h2o, h2oai h2oai/h2o-3, h2oai\/h2o-3 +2 moreExposure of Sensitive Information via Arbitrary System Path Lookup in h2oai/h2o-3CVE-2024-55505.3 Medium
- h2o, h2oai h2o-3, h2oai/h2o-3 +2 moreS3 Bucket Takeover in h2oai/h2o-3CVE-2024-14567.1 High
- h2o, h2oai h2oai/h2o-3 +1 moreExternal Control of File Name or Path in h2oai/h2o-3CVE-2023-6569Fix available9.3 Critical
- h2o, h2oai h2oai/h2o-3 +1 moreH2O Local File IncludeCVE-2023-60139.3 Critical
- h2o, h2oai h2oai/h2o-3 +1 moreH2O S3 Bucket TakeoverCVE-2023-60178.7 High
- h2o, h2oai h2oai/h2o-3 +1 moreLocal File Inclusion in h2oai/h2o-3CVE-2023-60389.3 Critical
- h2o, h2oai h2oai/h2o-3 +1 moreH2O Remote Code Execution via POJO Model ImportCVE-2023-6016EPSS 30.6%10.0 Critical