CVE security advisories and vulnerability history for h2o by pip.
Last updated
pip h2o has 16 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 15 have a known public exploit. The average CVSS base score across scored CVEs is 7.9.
This page aggregates every publicly disclosed vulnerability (CVE) affecting pip h2o, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of pip h2o's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of pip h2o's CVEs are currently listed in CISA's KEV catalog.
Public exploits
15
15 of pip h2o's CVEs have a known public exploit available.
Browse every pip h2o version named in a CVE, then pick one to see only the CVEs that affect it.
16 CVEs
The CWE weakness categories most often found in pip h2o CVEs. Follow any weakness for its full explanation.
How many pip h2o CVEs were published each year.
Browse vulnerabilities for other products by pip.
Common questions about pip h2o vulnerabilities.
pip h2o has 16 published CVE records since 2023.
None of pip h2o's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Yes — 15 of pip h2o's CVEs have a known public exploit.
2 distinct pip h2o versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
pip h2o's CVEs most often map to these CWE weakness types: CWE-73 (External Control of File Name or Path), CWE-502 (Deserialization of Untrusted Data), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-1333 (Inefficient Regular Expression Complexity).
pip h2o has 5 critical and 9 high-severity CVEs.
The average CVSS base score across pip h2o's scored CVEs is 7.9.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new pip h2o vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
