3.46.0.3 vulnerabilities

[arunaryasomayajula]

H2O version, Operating System and Environment
3.46.0.3

Actual behavior
Tested 56 dependencies for known issues, found 1 issue, 1 vulnerable path.

Issues with no direct upgrade or patch:

✗ External Control of File Name or Path [Critical Severity][https://security.snyk.io/vuln/SNYK-PYTHON-H2O-6125908] in [email protected]

introduced by [email protected]

No upgrade or patch available

Organization: model-development-puas

Package manager: pip

Target file: requirements.txt

Expected behavior
SNYK should not give any CVE warnings after scan.

Steps to reproduce
Steps to reproduce the behavior (with working code on a sample dataset, if possible):

1. Do this
2. Do that
3. Do something else
4. See error

Upload logs
If you can, please upload the H2O logs. More information on how to do that is available here, or you can use the h2o.downloadAllLogs() in R or the h2o.download_all_logs() function in Python.

Screenshots
If applicable, add screenshots to help explain your problem.

Additional context
Add any other context about the problem here.

[mohamedasni]

Fixed in #16357 cc @valenad1

[valenad1]

Duplication