CVE-2024-8062 Denial of Service in h2oai/h2o-3

A vulnerability in the typeahead endpoint of h2oai/h2o-3 version 3.46.0 allows for a denial of service. The endpoint performs a HEAD request to verify the existence of a specified resource without setting a timeout. An attacker can exploit this by sending multiple requests to an attacker-controll...

CVE-2024-8062

CVE-2024-8062 affects the h2oai/h2o-3 package (version 3.46.0) via the typeahead endpoint. The vulnerability arises when the endpoint uses a HEAD request to verify resource existence without a timeout, which can be exploited by sending many requests to an attacker‑controlled server that hangs, ca...

PT-2025-12216

Name of the Vulnerable Software and Affected Versions h2oai/h2o-3 version 3.46.0 Description A denial of service issue exists due to a vulnerability in the typeahead endpoint. The endpoint performs a HEAD request to verify the existence of a specified resource without setting a timeout. An attack...