formerbox (>=0.1.8, <=0.1.10), npvcc2016 (>=1.0.3, <=1.2.1) +2 more potentially affected by CVE-2026-31221 via pytorch-lightning (0.10.0)

pytorch-lightning PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - formerbox =0.1.8, =1.0.3, =1.2.1 - pytorch-forecasting 0.5.0 - pytorch-pqrnn 0.1.0 Source cves: CVE-2026-31221 Source advisor...

pytorch-quantum (>=0.1.0.dev1, <=0.1.0.dev3) potentially affected by CVE-2026-31221 via pytorch-lightning (1.1.1)

pytorch-lightning PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-quantum =0.1.0.dev1, =0.1.0.dev3 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

mimikit (>=0.1.0, <=0.1.10), pytorch-hyperlight (0.1.3) potentially affected by CVE-2026-31221 via pytorch-lightning (1.1.2)

pytorch-lightning PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - mimikit =0.1.0, =0.1.10 - pytorch-hyperlight 0.1.3 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

bigdl-chronos (2.0.0), bigdl-chronos-spark2 (2.0.0) +10 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.6.4)

pytorch-lightning PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bigdl-chronos 2.0.0 - bigdl-chronos-spark2 2.0.0 - bigdl-chronos-spark3 2.0.0 - dicee =0.0.2, =0.1.5, =0.0.2, =0.0.3, =1.0.0,...

ablation (0.1.0), deepethogram (>=0.3.0, <=0.5.0) +7 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.6.5)

pytorch-lightning PYPI version 1.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - ablation 0.1.0 - deepethogram =0.3.0, =0.0.15, =1.4.0, =1.0.0, =0.1.0, =0.1.2 - run-crom 1.0.0 Source cves: CVE-2026-31221...

autogluon (>=0.4.1b20220511, <=0.5.3b20221005), autogluon-multimodal (>=0.4.3b20220616, <=0.5.3b20221005) +38 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.6.5.post0)

pytorch-lightning PYPI version 1.6.5.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon =0.4.1b20220511, =0.4.3b20220616, =0.4.1b20220511, =1.0.0, =0.1.3, =0.5.33, =0.1.5, =0.6.0, =0.6.1, =0.47.0,...

finetuning-scheduler (0.2.1), nlhappy (2022.9.14) +1 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.7.1)

pytorch-lightning PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.2.1 - nlhappy 2022.9.14 - pytorch-segmentation-models-trainer 0.17.0 Source cves: CVE-2026-31221 Source...

harmonai-tools (0.0.5), neuralprophet (>=0.5.0rc1, <=0.5.1) +1 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.7.4)

pytorch-lightning PYPI version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - harmonai-tools 0.0.5 - neuralprophet =0.5.0rc1, =1.0.2, =1.0.4 Source cves: CVE-2026-31221 Source advisory:...

finetuning-scheduler (0.3.0) potentially affected by CVE-2026-31221 via pytorch-lightning (1.8.0.post1)

pytorch-lightning PYPI version 1.8.0.post1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.3.0 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

finetuning-scheduler (0.3.2), lightning-hpo (0.0.5) potentially affected by CVE-2026-31221 via pytorch-lightning (1.8.2)

pytorch-lightning PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.3.2 - lightning-hpo 0.0.5 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

asteroid (>=0.5.2rc0, <=0.5.3), biome-text (3.3.0) +20 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.4.9)

pytorch-lightning PYPI version 1.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.5.2rc0, =0.1.0.dev20211019, =1.0.0, =0.1.0, =0.0.1, =1.0.0, =0.0.0, =0.0.3, =3.0.0, =0.12.1, =0.14.2 and more Sour...

simple-leftrefill-inpainting (0.0.1), tldream (>=0.1.0, <=0.4.1) potentially affected by CVE-2026-31221 via pytorch-lightning (1.5.0)

pytorch-lightning PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - simple-leftrefill-inpainting 0.0.1 - tldream =0.1.0, =0.4.1 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJ...

moai-mdk (>=0.1.1a1, <=0.1.5a34), openstf (2.6.3) potentially affected by CVE-2026-31221 via pytorch-lightning (1.5.1)

pytorch-lightning PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - moai-mdk =0.1.1a1, =0.1.5a34 - openstf 2.6.3 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

debias-m (0.0.1), dlk (>=0.0.11, <=0.0.14) +4 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.6.0)

pytorch-lightning PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - debias-m 0.0.1 - dlk =0.0.11, =1.1.0, =1.1.1 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

torchline (>=0.1.0, <=0.1.4.2) potentially affected by CVE-2026-31221 via pytorch-lightning (0.5.3.2)

pytorch-lightning PYPI version 0.5.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - torchline =0.1.0, =0.1.4.2 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

clarinpl-embeddings (>=0.0.1rc158803945536, <=0.0.1rc158956732038), cluster-depp-test (>=0.0.3, <=0.0.21) +5 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.5.4)

pytorch-lightning PYPI version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - clarinpl-embeddings =0.0.1rc158803945536, =0.0.3, =0.3.0, =0.3.0, =0.1.0, =0.0.0.77, =0.0.0.79 -...

dlk (>=0.0.1, <=0.0.4) potentially affected by CVE-2026-31221 via pytorch-lightning (1.5.5)

pytorch-lightning PYPI version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - dlk =0.0.1, =0.0.4 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

classy-core (>=0.2.1.dev20220303, <=0.2.1), open-metric-learning (>=0.3.0, <=0.3.6) potentially affected by CVE-2026-31221 via pytorch-lightning (1.5.9)

pytorch-lightning PYPI version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - classy-core =0.2.1.dev20220303, =0.3.0, =0.3.6 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

autogluon (>=0.3.2b20220222, <=0.4.3b20220617), autogluon-text (>=0.3.2b20220222, <=0.4.1b20220510) +28 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.5.10.post0)

pytorch-lightning PYPI version 1.5.10.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon =0.3.2b20220222, =0.3.2b20220222, =0.3.0.dev20220423, =0.1.0, =0.0.1, =0.1.11, =0.0.2, =0.5.0, =1.0.0, =0.0.1...

finetuning-scheduler (0.1.2), gts-engine (>=0.1.1, <=0.1.2) +3 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.6.2)

pytorch-lightning PYPI version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.1.2 - gts-engine =0.1.1, =0.3.3, =0.1.0, =0.1.5 Source cves: CVE-2026-31221 Source advisory:...