PyPI/h2o CVE-2023-6569: critical 9.3, EPSS 0.72%
External Control of File Name or Path in h2oai/h2o-3
Action: Upgrade h2o to 3.46.0.1 or later.
pip install h2o==3.46.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.46.0.1 | - |
Fixed versions
| 3.46.0.1 |
Sources
- osv: GHSA-gqrq-j6pm-98c2
- https://nvd.nist.gov/vuln/detail/CVE-2023-6569
- https://github.com/h2oai/h2o-3/commit/e8884f5187eb81311877c5f0dd4d6d9c70f33d78
- https://github.com/h2oai/h2o-3
- https://huntr.com/bounties/a5d003dc-c23e-4c98-8dcf-35ba9252fa3c
CVE-2023-6569 · published · modified · JSON