EUVD-2025-7098

Malicious code in bioql PyPI...

CVE-2024-10572

In h2oai/h2o-3 version 3.46.0.1, the runtool command exposes classes in the water.tools package through the ast parser. This includes the XGBoostLibExtractTool class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service...

CVE-2024-10572

In h2oai/h2o-3 version 3.46.0.1, the runtool command exposes classes in the water.tools package through the ast parser. This includes the XGBoostLibExtractTool class, which can be exploited to shut down the server and write large files to arbitrary directories, leading to a denial of service...

CVE-2024-5979

CVE-2024-5979 affects h2oai/h2o-3 (version 3.46.0). The issue arises in the rapids component: the run_tool command can invoke the main() of any class under water.tools, enabling MojoConvertTool to crash the server and cause denial of service. Exploitation details are not provided in the sources; ...