https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 11:01:23 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-11489 bdu:2025-11489 https://cve.radiocsirt.org/vuln/bdu:2025-11489 https://cve.radiocsirt.org/vuln/euvd-2026-253239 EUVD-2026-253239 https://cve.radiocsirt.org/vuln/euvd-2026-253239 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6544 <p>A deserialization vulnerability exists in h2oai/h2o-3 versions &lt;= 3.46.0.8, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and using double URL encoding. This issue impacts all users of the affected versions.</p> <p>A deserialization vulnerability exists in h2oai/h2o-3 versions &lt;= 3.46.0.8, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and using double URL encoding. This issue impacts all users of the affected versions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-6544 https://cve.radiocsirt.org/vuln/ghsa-5w3j-gwgh-4rfv <p><strong>Affected:</strong> Maven: ai.h2o:h2o-core, PyPI: h2o</p> <p>A deserialization vulnerability exists in h2oai/h2o-3 versions &lt;= 3.46.0.7, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and using double URL encoding. This issue impacts all users of the affected versions.</p> <p><strong>Affected:</strong> Maven: ai.h2o:h2o-core, PyPI: h2o</p> <p>A deserialization vulnerability exists in h2oai/h2o-3 versions &lt;= 3.46.0.7, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and using double URL encoding. This issue impacts all users of the affected versions.</p> https://cve.radiocsirt.org/vuln/ghsa-5w3j-gwgh-4rfv https://cve.radiocsirt.org/vuln/pysec-2026-349 <p><strong>Affected:</strong> PyPI: h2o</p> <p>A deserialization vulnerability exists in h2oai/h2o-3 versions &lt;= 3.46.0.7, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and using double URL encoding. This issue impacts all users of the affected versions.</p> <p><strong>Affected:</strong> PyPI: h2o</p> <p>A deserialization vulnerability exists in h2oai/h2o-3 versions &lt;= 3.46.0.7, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and using double URL encoding. This issue impacts all users of the affected versions.</p> https://cve.radiocsirt.org/vuln/pysec-2026-349