CVE-2023-6017 (published 2023-11-16T16:07:01.811Z)
H2O included a reference to an S3 bucket that no longer existed allowing an attacker to take over the S3 bucket URL.
Affected products: Vendor: h2oai
Product: h2oai/h2o-3
Versions: unspecified