EUVD-2026-45872

A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public keras.layers.TorchModuleWrapper.fromconfig method. This method invokes torch.load..., weightsonly=False without requiring an explicit unsafe opt-in, such ...

CVE-2026-12484 Unsafe Deserialization in keras.layers.TorchModuleWrapper.from_config

A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public keras.layers.TorchModuleWrapper.fromconfig method. This method invokes torch.load..., weightsonly=False without requiring an explicit unsafe opt-in, such ...

CVE-2026-12484: Deserialization of Untrusted Data

A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public keras.layers.TorchModuleWrapper.fromconfig method. This method invokes torch.load..., weightsonly=False without requiring an explicit unsafe opt-in, such ...

CVE-2026-58659

A flaw was found in PyTorch Lightning. This vulnerability allows attackers to achieve remote code execution by crafting malicious checkpoint files. These files exploit a weakness in the loadstate function, which imports and executes attacker-controlled module names from checkpoint instantiator...

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

Overview pytorch-lightning is a lightweight PyTorch wrapper for ML researchers. Scale your models. Write less boilerplate. Affected versions of this package are vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' via the loadstate function that imports a...

PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the loadstate function that imports and executes attacker-controlled module names from checkpoint instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass...

GHSA-QQMF-GPG7-G8GW PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the loadstate function that imports and executes attacker-controlled module names from checkpoint instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass...

PYSEC-2026-3967

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the loadstate function that imports and executes attacker-controlled module names from checkpoint instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass...

PYSEC-2026-3967

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the loadstate function that imports and executes attacker-controlled module names from checkpoint instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass...

route-distances (>=1.2.0, <=1.2.4) potentially affected by CVE-2026-58659 via pytorch-lightning (1.8.3.post2)

pytorch-lightning PYPI version 1.8.3.post2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - route-distances =1.2.0, =1.2.4 Source cves: CVE-2026-58659 Source advisory: OSV:PYSEC-2026-3967...

torchok (0.4.12) potentially affected by CVE-2026-58659 via pytorch-lightning (1.8.4.post0)

pytorch-lightning PYPI version 1.8.4.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - torchok 0.4.12 Source cves: CVE-2026-58659 Source advisory: OSV:PYSEC-2026-3967...

cookiellmtest (>=1.0.1, <=1.0.6), cookienlp (>=1.0.0, <=1.0.2) +3 more potentially affected by CVE-2026-58659 via pytorch-lightning (1.6.1)

pytorch-lightning PYPI version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cookiellmtest =1.0.1, =1.0.0, =1.0.52, =1.0.53 - smallteacher 0.0.1 Source cves: CVE-2026-58659 Source advisory:...

bytesep (>=0.0.1, <=0.1.1), bytesep-fancybit (0.0.8) +2 more potentially affected by CVE-2026-58659 via pytorch-lightning (1.2.1)

pytorch-lightning PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bytesep =0.0.1, =0.1.0, =0.0.0, =0.0.2 Source cves: CVE-2026-58659 Source advisory: OSV:PYSEC-2026-3967...

olorenchemengine (>=0.0.0, <=1.0.3), recsys-slates-dataset (>=0.0.5, <=0.0.6) potentially affected by CVE-2026-58659 via pytorch-lightning (1.4.1)

pytorch-lightning PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - olorenchemengine =0.0.0, =0.0.5, =0.0.6 Source cves: CVE-2026-58659 Source advisory: OSV:PYSEC-2026-3967...

formerbox (>=0.1.8, <=0.1.10), npvcc2016 (>=1.0.3, <=1.2.1) +2 more potentially affected by CVE-2026-58659 via pytorch-lightning (0.10.0)

pytorch-lightning PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - formerbox =0.1.8, =1.0.3, =1.2.1 - pytorch-forecasting 0.5.0 - pytorch-pqrnn 0.1.0 Source cves: CVE-2026-58659 Source advisor...

cogexquestgen (>=1.0.0, <=1.0.3), deepmorpheus (>=0.2.1, <=0.2.3) potentially affected by CVE-2026-58659 via pytorch-lightning (0.8.4)

pytorch-lightning PYPI version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cogexquestgen =1.0.0, =0.2.1, =0.2.3 Source cves: CVE-2026-58659 Source advisory: OSV:PYSEC-2026-3967...

finetuning-scheduler (0.3.2), lightning-hpo (0.0.5) potentially affected by CVE-2026-58659 via pytorch-lightning (1.8.2)

pytorch-lightning PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.3.2 - lightning-hpo 0.0.5 Source cves: CVE-2026-58659 Source advisory: OSV:PYSEC-2026-3967...

gradattack (>=0.1.1, <=0.1.2), openue (>=0.2.3, <=0.2.5) potentially affected by CVE-2026-58659 via pytorch-lightning (1.3.1)

pytorch-lightning PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - gradattack =0.1.1, =0.2.3, =0.2.5 Source cves: CVE-2026-58659 Source advisory: OSV:PYSEC-2026-3967...

databalancer (>=0.0.7, <=0.0.8), torchline (>=0.3.0.0a0, <=0.3.0.1) potentially affected by CVE-2026-58659 via pytorch-lightning (0.7.5)

pytorch-lightning PYPI version 0.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - databalancer =0.0.7, =0.3.0.0a0, =0.3.0.1 Source cves: CVE-2026-58659 Source advisory: OSV:PYSEC-2026-3967...

cluster-depp-test (0.0.2), depp (>=0.1.9, <=0.2.3) +2 more potentially affected by CVE-2026-58659 via pytorch-lightning (1.0.5)

pytorch-lightning PYPI version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cluster-depp-test 0.0.2 - depp =0.1.9, =0.0.1, =0.0.3 - pytorch-lightning-help 0.0.1 Source cves: CVE-2026-58659 Source...