amlr (>=0.3.6, <=0.4.1), atlantic (>=0.0.92, <=2.0.30) +31 more potentially affected by CVE-2024-7768 via h2o (>=3.18.0.8, <=3.46.0.12)

h2o PYPI version =3.18.0.8, =0.3.6, =0.0.92, =1.0.81, =2019.9.10.14.39.5, =1.0.1, =0.1.20, =0.1.0, =0.1.2, =0.3.2, =0.3.0, =1.0.1.1.4, =0.4.0.dev3, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2024-7768 Source advisory: OSV:PYSEC-2026-1443...

CVE-2024-7768

A vulnerability in the /3/ImportFiles endpoint of h2oai/h2o-3 version 3.46.1 allows an attacker to cause a denial of service. The endpoint takes a single GET parameter, path, which can be recursively set to reference itself. This leads the server to repeatedly call its own endpoint, eventually...

ai.h2o:h2o-admissibleml (>=3.34.0.1, <=3.46.0.12), ai.h2o:h2o-algos (>=0.1.9, <=3.46.0.12) +49 more potentially affected by CVE-2024-7768 via ai.h2o:h2o-core (>=0.1.9, <=3.46.0.12)

ai.h2o:h2o-core MAVEN version =0.1.9, =3.34.0.1, =0.1.9, =0.1.9, =3.12.0.1, =3.8.2.4, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.12 and more Source cves: CVE-2024-7768 Source advisory: SNYK:JAVA-AIH2O-9486739...

ai.h2o:h2o-algos (0.1.9), ai.h2o:h2o-app (0.1.9) +2 more potentially affected by CVE-2024-7768 via ai.h2o:h2o-core (0.1.9)

ai.h2o:h2o-core MAVEN version 0.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on ai.h2o:h2o-core and may be impacted: - ai.h2o:h2o-algos 0.1.9 - ai.h2o:h2o-app 0.1.9 - ai.h2o:h2o-scala2.10 0.1.9 - ai.h2o:sparkling-water-core2.10 0.2.0 Source cves:...

ai.h2o:h2o-algos (0.1.10), ai.h2o:h2o-app (0.1.10) +1 more potentially affected by CVE-2024-7768 via ai.h2o:h2o-core (0.1.10)

ai.h2o:h2o-core MAVEN version 0.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on ai.h2o:h2o-core and may be impacted: - ai.h2o:h2o-algos 0.1.10 - ai.h2o:h2o-app 0.1.10 - ai.h2o:h2o-scala2.10 0.1.10 Source cves: CVE-2024-7768 Source advisory:...

CVE-2024-7768

A vulnerability in the /3/ImportFiles endpoint of h2oai/h2o-3 version 3.46.1 allows an attacker to cause a denial of service. The endpoint takes a single GET parameter, path, which can be recursively set to reference itself. This leads the server to repeatedly call its own endpoint, eventually...

CVE-2024-7768 Denial of Service in h2oai/h2o-3

A vulnerability in the /3/ImportFiles endpoint of h2oai/h2o-3 version 3.46.1 allows an attacker to cause a denial of service. The endpoint takes a single GET parameter, path, which can be recursively set to reference itself. This leads the server to repeatedly call its own endpoint, eventually...