Mvnrepository vulnerabilities
We track 1 vulnerability in Mvnrepository products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 21, 2024.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Mvnrepository vulnerabilities
- 7.5 High severity
h2o-core: Deserialization of Untrusted Data
The H2O machine learning platform uses "Iced" classes as the primary means of moving Java Objects around the cluster. The Iced format supports inclusion of serialized Java objects. When a model is deserialized, any class is allowed to be deserialized (no class