cve.bz

CVE-2023-6569

8.2 highEPSS 0.7%

External Control of File Name or Path in h2oai/h2o-3

Severity

CVSS 3.1

8.2 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
EPSS
0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWEs
CWE-610, CWE-73
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-gqrq-j6pm-98c2PyPIh2o<3.46.0.13.46.0.1
PYSEC-2026-350PyPIh2o<3.46.0.13.46.0.1

References

Check your stackJSON