PT-2025-12045 · H2O.Ai · H2O-3

Name of the Vulnerable Software and Affected Versions: h2oai/h2o-3 version 3.46.0.1 Description: A denial of service DoS attack can be performed by exploiting a vulnerability in the "/3/ParseSetup" endpoint. This endpoint applies a user-specified regular expression to a user-controllable string,...