pytorch-segmentation-models-trainer (0.7.0), ratsnlp (0.0.9993) potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.7)

pytorch-lightning PYPI version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-segmentation-models-trainer 0.7.0 - ratsnlp 0.0.9993 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V...

gradsflow (>=0.0.1b1, <=0.0.3), pytorch-lightning-spells (>=0.0.4, <=0.0.5) potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.0)

pytorch-lightning PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - gradsflow =0.0.1b1, =0.0.4, =0.0.5 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

paoding (0.1.1), pytorch-segmentation-models-trainer (0.12.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.8)

pytorch-lightning PYPI version 1.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - paoding 0.1.1 - pytorch-segmentation-models-trainer 0.12.0 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

benchformer (0.0.1.dev1), nerblackbox (>=0.0.5, <=0.0.10) +1 more potentially affected by CVE-2024-8020 via pytorch-lightning (0.7.1)

pytorch-lightning PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - benchformer 0.0.1.dev1 - nerblackbox =0.0.5, =0.0.10 - nlp-architect 0.5.3 Source cves: CVE-2024-8020 Source advisory:...

axlnlp (0.0.1) potentially affected by CVE-2024-8020 via pytorch-lightning (0.7.3)

pytorch-lightning PYPI version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - axlnlp 0.0.1 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

databalancer (>=0.0.7, <=0.0.8), torchline (>=0.3.0.0a0, <=0.3.0.1) potentially affected by CVE-2024-8020 via pytorch-lightning (0.7.5)

pytorch-lightning PYPI version 0.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - databalancer =0.0.7, =0.3.0.0a0, =0.3.0.1 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

bigdl-chronos (2.0.0), bigdl-chronos-spark2 (2.0.0) +10 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.6.4)

pytorch-lightning PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bigdl-chronos 2.0.0 - bigdl-chronos-spark2 2.0.0 - bigdl-chronos-spark3 2.0.0 - dicee =0.0.2, =0.1.5, =0.0.2, =0.0.3, =1.0.0,...

PyTorch Lightning denial of service vulnerability

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server...

nemo-toolkit (1.0.0rc1) potentially affected by CVE-2024-8020 via pytorch-lightning (1.1.5)

pytorch-lightning PYPI version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - nemo-toolkit 1.0.0rc1 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

lightning-flash (>=0.1.0, <=0.2.1) potentially affected by CVE-2024-8020 via pytorch-lightning (1.2.0rc0)

pytorch-lightning PYPI version 1.2.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - lightning-flash =0.1.0, =0.2.1 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

asteroid (>=0.3.1rc0, <=0.3.2), borisml (>=0.0.2, <=0.1.0) +3 more potentially affected by CVE-2024-8020 via pytorch-lightning (0.7.6)

pytorch-lightning PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.3.1rc0, =0.0.2, =0.1.0, =0.3.0.2, =0.3.0.4 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

GHSA-98FP-7V67-4V3Q PyTorch Lightning denial of service vulnerability

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server...

hypast (>=0.0.5, <=0.0.7), solo-learn (1.0.2) potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.7)

pytorch-lightning PYPI version 1.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - hypast =0.0.5, =0.0.7 - solo-learn 1.0.2 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

cait (1.1.3), contextualized-ml (>=0.2.5, <=0.2.6) +4 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.9.4)

pytorch-lightning PYPI version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cait 1.1.3 - contextualized-ml =0.2.5, =0.3.0, =0.1.0, =0.2.0 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4...

bob-bio-face (8.0.0), bob-bio-video (7.0.0) +3 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.8.1)

pytorch-lightning PYPI version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bob-bio-face 8.0.0 - bob-bio-video 7.0.0 - bob-pad-face 5.0.0 - everyvoice 0.1.20230307 - finetuning-scheduler 0.3.1 Source...

bigdl (2.0.0), bigdl-spark2 (2.0.0) +9 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.2)

pytorch-lightning PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bigdl 2.0.0 - bigdl-spark2 2.0.0 - bigdl-spark3 2.0.0 - classy-imaginary 0.3.5 - imaginairy =0.7.2, =1.1.1rc2, =2.0.14, =2.1.0...

cookiellmtest (>=1.0.1, <=1.0.6), cookienlp (>=1.0.0, <=1.0.2) +3 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.6.1)

pytorch-lightning PYPI version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cookiellmtest =1.0.1, =1.0.0, =1.0.52, =1.0.53 - smallteacher 0.0.1 Source cves: CVE-2024-8020 Source advisory:...

moai-mdk (>=0.1.0a1, <=0.1.0a2) potentially affected by CVE-2024-8020 via pytorch-lightning (1.0.7)

pytorch-lightning PYPI version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - moai-mdk =0.1.0a1, =0.1.0a2 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

argos-trains (0.1.0), fastmri (>=0.1.0.post210716, <=0.1.1) +5 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.0.8)

pytorch-lightning PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - argos-trains 0.1.0 - fastmri =0.1.0.post210716, =0.5.1, =0.5.3 - quickvision 0.1.1rc1 - raylab 0.14.12 Source cves:...

intrepppid (0.1.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.9.1)

pytorch-lightning PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - intrepppid 0.1.0 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...