[ Vendor · 3 CVEs ]
h2o
CVEs affecting h2o published in the last 30 days, plus any h2o CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-55367 | 4 Nov 2026 | CVSS 7.5 | h2oh2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 4212ce114506a073505fd389db16ad2ba4e582a0, a client could send an… | |
| CVE-2026-55368 | 4 Nov 2026 | CVSS 8.1 | h2oh2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 48b7ae12107fd2b118e4641da49599e9aac8edd8, H2O's access-log… | |
| CVE-2026-59993 | 30 Oct 2026 | CVSS 6.5 | h2o picotlsPicotls is a TLS protocol library that allows users select different crypto backends based on their use case. In affected revisions through 44bc503… |