Skip to content
OpenAdvisories

Vendor

h5io

1 known vulnerabilities.

Products

h5io 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-120499

    h5io before 0.2.6 Arbitrary Code Execution via read_hdf5

    h5io before 0.2.6 contains a code injection vulnerability in read_hdf5() that allows attackers to execute arbitrary code by supplying a crafted HDF5 file. Attackers can store Python code in a node titled timezone, which _triage_read() passes to eval() with bu…

    h5io h5io