CVE-2024-6863
2 advisories.
PyPI/h2o CVE-2024-6863: medium 6.5
H2O Vulnerable to Execution of Arbitrary Files
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.32.1.2 | - | 3.46.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-m37h-8r48-2cxj
- https://nvd.nist.gov/vuln/detail/CVE-2024-6863
- https://github.com/h2oai/h2o-3
- https://github.com/h2oai/h2o-3/blob/a20b5b19b769866ee24b217ee78b820e64c1cd6a/h2o-core/src/main/java/water/tools/EncryptionTool.java#L49
- https://huntr.com/bounties/10f55937-0cba-4530-897f-2abf30ed5270
CVE-2024-6863 · published · modified · JSON
PyPI/h2o CVE-2024-6863: medium 6.5
H2O Vulnerable to Execution of Arbitrary Files
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.32.1.2 | - | 3.46.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1442
- https://nvd.nist.gov/vuln/detail/CVE-2024-6863
- https://github.com/h2oai/h2o-3
- https://github.com/h2oai/h2o-3/blob/a20b5b19b769866ee24b217ee78b820e64c1cd6a/h2o-core/src/main/java/water/tools/EncryptionTool.java#L49
- https://huntr.com/bounties/10f55937-0cba-4530-897f-2abf30ed5270
- https://pypi.org/project/h2o
- https://github.com/advisories/GHSA-m37h-8r48-2cxj
CVE-2024-6863 · published · modified · JSON