H2o
12 known vulnerabilities
Top Products
h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 9265bdd, there is an HTTP/2 state am
h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 6b5370d, h2o is vulnerable to a Deni
h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 8dc37cb, when h2o receives a ClientH
Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b
Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 93
Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit dc
Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b
A weakness has been identified in h2oai h2o-3 up to 7402. This vulnerability affects the function exec of the file h2o-c
A security flaw has been discovered in h2oai h2o-3 up to 7402. This affects the function importBinaryModel of the file h
A vulnerability was identified in h2oai h2o-3 up to 7402. Affected by this issue is the function importFiles of the file
A critical remote code execution vulnerability exists in the unauthenticated REST API endpoint /99/ImportSQLTable in H2O
Quicly, an IETF QUIC protocol implementation, is susceptible to a denial-of-service attack prior to commit d9d3df6a8530a
Frequently Asked Questions
How many CVEs affect H2o?
H2o has 12 CVE records in our database, including 1 critical and 6 high severity vulnerabilities.
What are the most severe H2o vulnerabilities?
H2o has 1 critical severity (CVSS 9.0+) and 6 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for H2o vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in H2o products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect H2o Vulnerabilities
CyberStrike scans your infrastructure for H2o vulnerabilities and provides real-time remediation guidance.
Get Started