h2o

Top products

The 15 most recently published vulnerabilities affecting h2o.

• CVE-2026-54340h2o has HTTP/2 state amplification7.5Jul 16, 2026
• CVE-2026-44453h2o is vulnerable to musl libc stack overflow7.5Jul 16, 2026
• CVE-2026-44452h2o is vulnerable to heap overrun5.9Jul 16, 2026
• CVE-2026-44436Quicly is vulnerable to connection state corruption7.5Jul 16, 2026
• CVE-2026-44435Quicly: Remote Denial of Service via assertion failure when CRYPTO stream handshake data exceeds 32KB7.5Jul 16, 2026
• CVE-2026-44434Quicly is vulnerable to stateless reset injection5.3Jul 16, 2026
• CVE-2026-44433Quicly is vulnerable to memory exhaustion5.3Jul 16, 2026
• CVE-2026-55213h2o: musl libc stack overflow (QPACK)7.5Jul 10, 2026
• CVE-2026-8752h2oai h2o-3 Rapids setproperty Primitive AstSetProperty.java exec access control5.3May 17, 2026
• CVE-2026-8751h2oai h2o-3 JAR Model.java importBinaryModel deserialization7.3May 17, 2026
• CVE-2026-8750h2oai h2o-3 ImportFile API PersistNFS.java importFiles information disclosure5.3May 17, 2026
• CVE-2026-3960Remote Code Execution in h2oai/h2o-39.8Apr 23, 2026
• CVE-2025-61684Quicly has assertion failures7.5Jan 19, 2026
• CVE-2025-10769h2oai h2o-3 H2 JDBC Driver ImportSQLTable deserialization6.3Sep 21, 2025
• CVE-2025-10768h2oai h2o-3 IBMDB2 JDBC Driver ImportSQLTable deserialization6.3Sep 21, 2025