H2
Product
h2oai/h2o-3
by h2oai · last CVE Apr 23, 2026
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 8Medium 1Low 0
Watch

Add h2oai/h2o-3 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-3960
9.8
1%
Apr 23
Remote Code Execution in h2oai/h2o-3
Affected: before 3.46.0.10
CVE-2025-6544
9.8
1%
Sep 21
Deserialization Vulnerability in h2oai/h2o-3
Affected: before 3.46.8
CVE-2025-5662
9.8
1%
Sep 2
Deserialization Vulnerability in h2oai/h2o-3
Affected: before 3.46.0.8
CVE-2025-6507
9.8
17%
Sep 1
Deserialization of Untrusted Data in h2oai/h2o-3
Affected: before 3.46.0.8
CVE-2024-10553
9.8
2%
Mar 20
Jdbc Deserialization in h2oai/h2o-3
Affected: before 3.47.0
CVE-2024-5986
9.1
1%
Feb 2
Remote Arbitrary File Write with Arbitrary Data in h2oai/h2o-3
Affected: through latest
Showing 6