h2o Latest Vulnerabilities

Latest vulnerabilities published by h2o

JSON RSS CSV 🔔 Create Alert Trigger

19 January 2026

Denial of Service Vulnerability in Quicly by H2O
CVE-2025-61684
H2oQuicly7.5HIGH

8 September 2025

Insecure Direct Object Reference in Envasadora H2O Eireli Product
CVE-2025-52389
Envasadora H2O Ei...Soda Cristal8.8HIGH

11 October 2024

Double-free bug in Picotls TLS protocol library could lead to arbitrary code execution
CVE-2024-45402
H2oPicotls9.8CRITICAL
QUIC Protocol Implementation Vulnerable to Denial-of-Service Attack
CVE-2024-45396
H2oQuicly7.5HIGH
h2o HTTP Server Vulnerability: Crash and DoS Exploit
CVE-2024-45403
H2oH2o7.5HIGH
HTTP Request Spoofing Vulnerability in h2o HTTP Server
CVE-2024-45397
H2oH2o7.5HIGH
H2O HTTP Server Vulnerability: Inheritance Confusion Causes Unexpected Header Modification
CVE-2024-25622
H2oH2o4.3MEDIUM

21 July 2024

Attackers Can Use Crafted Iced Models to Execute Arbitrary Code on H2O Platform
CVE-2024-6960
H2O

12 December 2023

27 April 2023

H2O vulnerable to read from uninitialized pointer in the reverse proxy handler
CVE-2023-30847
H2oH2o8.2HIGH

1 February 2022

Unititialized memory access in h2o
CVE-2021-43848
H2oH2o👾🟡EPSS 13%7.4HIGH

3 October 2014

Man-in-the-Middle Vulnerability in H2O Application for Android
CVE-2014-6905
H2o Human Harmony...H2o Human Harmony Orga...