← All advisories

Critical severityNVD Advisory· Published Dec 14, 2023· Updated May 22, 2025

External Control of File Name or Path in h2oai/h2o-3

CVE-2023-6569

Description

External Control of File Name or Path in h2oai/h2o-3

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
h2oPyPI	< 3.46.0.1	3.46.0.1

Affected products

2

ghsa-coords
pkg:pypi/h2o
Range: < 3.46.0.1
H2oai/H2o 3cpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-gqrq-j6pm-98c2ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-6569ghsaADVISORY
github.com/h2oai/h2o-3/commit/e8884f5187eb81311877c5f0dd4d6d9c70f33d78ghsaWEB
huntr.com/bounties/a5d003dc-c23e-4c98-8dcf-35ba9252fa3cghsaWEB

News mentions

0

No linked articles in our index yet.