漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Denial of Service by ReDOS in h2oai/h2o-3
Vulnerability Description
A vulnerability in the `/3/Parse` endpoint of h2oai/h2o-3 version 3.46.0.1 allows for a denial of service (DoS) attack. The endpoint uses a user-specified string to construct a regular expression, which is then applied to another user-specified string. By sending multiple simultaneous requests, an attacker can exhaust all available threads, leading to a complete denial of service.
CVSS Information
N/A
Vulnerability Type
CWE-1333
Vulnerability Title
H2O 资源管理错误漏洞
Vulnerability Description
H2O是H2O.ai开源的一个用于分布式、可扩展机器学习的内存平台。 H2O 3.46.0.1版本存在资源管理错误漏洞，该漏洞源于/3/Parse端点使用用户指定的正则表达式，可能导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A