Vulnerabilities for horovod

No release of horovod is currently known to be free of vulnerabilities.

Details

• GHSA-mf8f-x4r3-jm8c2026-05-12

  Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component

• GHSA-mrhh-3ggq-23p22025-03-20

  Horovod Vulnerable to Command Injection

• GHSA-47wv-vhj2-g66m2022-03-29

  Use of insecure temporary file in Horovod

  Fixed in: 0.24.0, b96ecae4dc69fc0a83c7c2d3f1dde600c20a1b41