Skip to content
OpenAdvisories

Vendor

horovod

2 known vulnerabilities.

Products

horovod/horovod 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-10190

    Unauthenticated Remote Code Execution in ElasticRendezvousHandler in horovod/horovod

    Horovod versions up to and including v0.28.1 are vulnerable to unauthenticated remote code execution. The vulnerability is due to improper handling of base64-encoded data in the `ElasticRendezvousHandler`, a subclass of `KVStoreHandler`. Specifically, the `_p…

    horovod horovod/horovod horovod PyPI