The H2O.ai team has evaluated the recent Spring RCE vulnerability reported on March 31, 2022 in CVE-2022-22965. At this time, no H2O.ai products or services are known to be impacted. We will continue to monitor and update this security bulletin if the situation changes.
Spring Framework RCE (SpringShell)
April 1, 2022