Package impact
PyPI / horovod
| CVE | Severity | CVSS | Risk | Published | Description | Impact |
|---|---|---|---|---|---|---|
| CVE-2026-31234 | critical | 9.8 | 9.8 | 16d ago | Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component | |
| CVE-2024-10190 | unknown | — | — | 1y ago | Horovod Vulnerable to Command Injection | |
| CVE-2022-0315 | unknown | — | — | 4y ago | Insecure Temporary File in GitHub repository horovod/horovod prior to 0.24.0. |