CVE-2024-6854
3 advisories.
PyPI/h2o CVE-2024-6854: high 7.1, EPSS 0.78%
H2O Vulnerable to Arbitrary File Overwrite via File Export
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.32.1.1 | - | 3.46.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-47f6-5p7h-5f3h
- https://nvd.nist.gov/vuln/detail/CVE-2024-6854
- https://github.com/h2oai/h2o-3
- https://github.com/h2oai/h2o-3/blob/a20b5b19b769866ee24b217ee78b820e64c1cd6a/h2o-core/src/main/java/hex/Model.java#L3366
- https://huntr.com/bounties/97d013f9-ac51-4c80-8dd7-8dfde11f33b2
CVE-2024-6854 · published · modified · JSON
PyPI/h2o CVE-2024-6854: high 7.1, EPSS 0.78%
H2O Vulnerable to Arbitrary File Overwrite via File Export
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.32.1.1 | - | 3.46.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1436
- https://nvd.nist.gov/vuln/detail/CVE-2024-6854
- https://github.com/h2oai/h2o-3
- https://github.com/h2oai/h2o-3/blob/a20b5b19b769866ee24b217ee78b820e64c1cd6a/h2o-core/src/main/java/hex/Model.java#L3366
- https://huntr.com/bounties/97d013f9-ac51-4c80-8dd7-8dfde11f33b2
- https://pypi.org/project/h2o
- https://github.com/advisories/GHSA-47f6-5p7h-5f3h
CVE-2024-6854 · published · modified · JSON
Maven/ai.h2o:h2o-core CVE-2024-6854: high 7.1
H2O Vulnerable to Arbitrary File Overwrite via File Export
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.32.1.1 | - | 3.46.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-47f6-5p7h-5f3h#Maven/ai.h2o:h2o-core
- https://nvd.nist.gov/vuln/detail/CVE-2024-6854
- https://github.com/h2oai/h2o-3
- https://github.com/h2oai/h2o-3/blob/a20b5b19b769866ee24b217ee78b820e64c1cd6a/h2o-core/src/main/java/hex/Model.java#L3366
- https://huntr.com/bounties/97d013f9-ac51-4c80-8dd7-8dfde11f33b2
CVE-2024-6854 · published · modified · JSON