Executive brief
H2O Vulnerable to Denial of Service (DoS) via `/3/ParseSetup` Endpoint
Affected products
- Maven ai.h2o:h2o-core
- PyPI h2o
Junglewise Threat Intelligence
CVE-2024-10550: PYSEC-2026-1440 - H2O Vulnerable to Denial of Service (DoS) via `/3/ParseSetup` Endpoint
CVE-2024-10550 · Severity: low · CVSS 3 · Published 2026-07-07
Technologies: ai.h2o:h2o-core (Maven), h2o (PyPI). Vendors: Maven, PyPI.
Related threats
- PYSEC-2026-1441 - H2O Vulnerable to Arbitrary File Overwrite
- PYSEC-2026-1438 - H2O Vulnerable to Denial of Service (DoS) via `HEAD` Request
- PYSEC-2026-1443 - H2O Vulnerable to Denial of Service (DoS) via `/3/ImportFiles` Endpoint
- PYSEC-2026-1439 - H2O Vulnerable to Denial of Service (DoS) via Large GZIP Parsing
- PYSEC-2026-1442 - H2O Vulnerable to Execution of Arbitrary Files