H2O affected by a deserialization vulnerability
What to do
- Some affected packages have no fixed version yet: follow the advisory for mitigations and watch this page for the fix.
- Redeploy and restart long-running processes so they load the fixed code.
Affected packages
ai.h2o:h2o-core
- <= 3.46.0.7
- no fix yet
Check your project: mvn dependency:tree -Dincludes=ai.h2o:h2o-core
h2o
- <= 3.46.0.7
- no fix yet
Check your project: pip show h2o