horovod vulnerabilities
CVEs whose affected-version data names the horovod package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-31234Critical· 9.8Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component
Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component
▾ Midnighthorovod · horovodEPSS 0.69%via OSV
CVE-2024-10190Critical· 9.8Horovod Vulnerable to Command Injection
Horovod Vulnerable to Command Injection
▾ Midnighthorovod · horovodEPSS 1.1%via OSV