h2oai / h2o-3

H2O is an Open Source, Distributed, Fast & Scalable Machine Learning Platform: Deep Learning, Gradient Boosting (GBM) & XGBoost, Random Forest, Generalized Linear Modeling (GLM with Elastic Net), K-Means, PCA, Generalized Additive Models (GAM), RuleFit, Support Vector Machine (SVM), Stacked Ensembles, Automatic Machine Learning (AutoML), etc.
http://h2o.ai
Apache License 2.0
6.94k stars 2k forks source link

update avro:avro library from 1.11.3 to 1.11.4 or 1.12.0 to fix CVE-2024-47561 #16416

Closed wendycwong closed 1 month ago

wendycwong commented 1 month ago

Here is the link to this risk:

https://nvd.nist.gov/vuln/detail/CVE-2024-47561

We need to fix this so DAI can use latest version of H2O-3.

Check deepwater libraries as well if it can be fixed by just upgrading the library versions.