漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Denial of Service by ReDOS in h2oai/h2o-3
Vulnerability Description
A vulnerability in the `/3/ParseSetup` endpoint of h2oai/h2o-3 version 3.46.0.1 allows for a denial of service (DoS) attack. The endpoint applies a user-specified regular expression to a user-controllable string. This can be exploited by an attacker to cause inefficient regular expression complexity, leading to the exhaustion of server resources and making the server unresponsive.
CVSS Information
N/A
Vulnerability Type
CWE-1333
Vulnerability Title
H2O 安全漏洞
Vulnerability Description
H2O是H2O.ai开源的一个用于分布式、可扩展机器学习的内存平台。 H2O 3.46.0.1版本存在安全漏洞，该漏洞源于/3/ParseSetup端点使用用户指定的正则表达式，可能导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A