Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

ai.h2o:h2o-core

15 known vulnerabilities (5 critical, 8 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
3.46.0.12 (Aug 11, 2026): affected by CVE-2024-7768
Newest unaffected release
Every release is affected by at least one advisory
Advisories
15 · 5 critical, 8 high, 2 medium
Dependents
22
Releases
258 since 0.1.3 (Aug 1, 2014)
Registry
Maven Central
Releases read
Nov 8, 2026

Version timeline

Show all 15 advisoriesShow fewer advisories
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 15

  • CVE-2026-3960Medium 5.9

    Remote Code Execution in h2oai/h2o-3

    Affected: fixed in 3.46.0.10.

    Fixed in 3.46.0.10 (released Mar 12, 2026, 42 days before disclosure).

    The latest release, 3.46.0.12, is not affected.

  • CVE-2024-5986Critical 9.1

    Remote Arbitrary File Write with Arbitrary Data in h2oai/h2o-3

    Affected: through 3.46.0.1.

    Fixed in 3.46.0.2 (released May 13, 2024, 630 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 3.46.0.12, is not affected.

  • CVE-2025-6544Critical 9.8

    Deserialization Vulnerability in h2oai/h2o-3

    Affected: through 3.46.0.7.

    Fixed in 3.46.0.8 (released Oct 8, 2025, 17 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 3.46.0.12, is not affected.

  • Denial of Service by ReDOS in h2oai/h2o-3

    Affected: from 3.30.0.7, through 3.46.0.1.

    Fixed in 3.46.0.2 (released May 13, 2024, 311 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 3.46.0.12, is not affected.

  • Denial of Service in h2oai/h2o-3

    Affected: from 3.2.0.1, through 3.46.0.

    Fixed in 3.46.0.1 (released Mar 13, 2024, 372 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 3.46.0.12, is not affected.

  • Denial of Service in h2oai/h2o-3

    Affected: through 3.46.1.

    No fix released. The latest release, 3.46.0.12, is still affected.

  • CVE-2024-6863Medium 6.5

    Encryption of Arbitrary Files with Attacker-Controlled Key in h2oai/h2o-3

    Affected: from 3.32.1.2, through 3.46.0.

    Fixed in 3.46.0.1 (released Mar 13, 2024, 372 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 3.46.0.12, is not affected.

  • Arbitrary File Overwrite in h2oai/h2o-3

    Affected: from 3.10.4.1, through 3.46.0.

    Fixed in 3.46.0.1 (released Mar 13, 2024, 372 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 3.46.0.12, is not affected.

  • Denial of Service by ReDOS in h2oai/h2o-3

    Affected: from 3.30.0.7, through 3.46.0.1.

    Fixed in 3.46.0.2 (released May 13, 2024, 311 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 3.46.0.12, is not affected.

  • Arbitrary File Overwrite in h2oai/h2o-3

    Affected: from 3.32.1.1, through 3.46.0.

    Fixed in 3.46.0.1 (released Mar 13, 2024, 372 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 3.46.0.12, is not affected.

  • CVE-2024-10553Critical 9.8

    Jdbc Deserialization in h2oai/h2o-3

    Affected: fixed in 3.46.0.6.

    Fixed in 3.46.0.6 (released Nov 2, 2024, 138 days before disclosure).

    The latest release, 3.46.0.12, is not affected.

  • Denial of Service in h2oai/h2o-3

    Affected: from 3.32.1.2, through 3.46.0.2.

    Fixed in 3.46.0.3 (released Jun 11, 2024, 282 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 3.46.0.12, is not affected.

  • CVE-2024-45758Critical 9.1

    H2O.ai H2O through 3.46.0.4 allows attackers to arbitrarily set the JDBC URL, leading to deserialization attacks, file reads, and command…

    Affected: through 3.46.0.7.

    Fixed in 3.46.0.8 (released Oct 8, 2025, 397 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 3.46.0.12, is not affected.

  • H2O deserializes ML models without filtering, potentially allowing execution of malicious code

    Affected: through 3.46.0.4.

    Fixed in 3.46.0.5 (released Aug 29, 2024, 39 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 3.46.0.12, is not affected.

  • CVE-2023-6038Critical 9.3

    Local File Inclusion in h2oai/h2o-3

    Affected: through 3.40.0.4.

    Fixed in 3.42.0.1 (released Jun 20, 2023, 149 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 3.46.0.12, is not affected.