Skip to content
OpenAdvisories

Package · PyPI

horovod

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.8
    CVE-2026-31234

    Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component

    Horovod thru 0.28.1 contains an insecure deserialization vulnerability (CWE-502) in its KVStore HTTP server component. The KVStore server, used for distributed task coordination, lacks authentication and authorization controls, allowing any remote attacker to…

    horovod PyPI
  • Critical 9.8
    CVE-2024-10190

    Unauthenticated Remote Code Execution in ElasticRendezvousHandler in horovod/horovod

    Horovod versions up to and including v0.28.1 are vulnerable to unauthenticated remote code execution. The vulnerability is due to improper handling of base64-encoded data in the `ElasticRendezvousHandler`, a subclass of `KVStoreHandler`. Specifically, the `_p…

    horovod horovod/horovod horovod PyPI
  • High 8.2
    CVE-2022-0315

    Insecure Temporary File in horovod/horovod

    Insecure Temporary File in GitHub repository horovod/horovod prior to 0.24.0.

    horovod horovod/horovod horovod PyPI