ablation (0.1.0), deepethogram (>=0.3.0, <=0.5.0) +7 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.6.5)

pytorch-lightning PYPI version 1.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - ablation 0.1.0 - deepethogram =0.3.0, =0.0.15, =1.4.0, =1.0.0, =0.1.0, =0.1.2 - run-crom 1.0.0 Source cves: CVE-2026-31221...

finetuning-scheduler (0.3.2), lightning-hpo (0.0.5) potentially affected by CVE-2026-31221 via pytorch-lightning (1.8.2)

pytorch-lightning PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.3.2 - lightning-hpo 0.0.5 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

autogluon (>=0.3.2b20220222, <=0.4.3b20220617), autogluon-text (>=0.3.2b20220222, <=0.4.1b20220510) +28 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.5.10.post0)

pytorch-lightning PYPI version 1.5.10.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon =0.3.2b20220222, =0.3.2b20220222, =0.3.0.dev20220423, =0.1.0, =0.0.1, =0.1.11, =0.0.2, =0.5.0, =1.0.0, =0.0.1...

axlnlp (0.0.1) potentially affected by CVE-2026-31221 via pytorch-lightning (0.7.3)

pytorch-lightning PYPI version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - axlnlp 0.0.1 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

clarinpl-embeddings (>=0.0.1rc158803945536, <=0.0.1rc158956732038), cluster-depp-test (>=0.0.3, <=0.0.21) +5 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.5.4)

pytorch-lightning PYPI version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - clarinpl-embeddings =0.0.1rc158803945536, =0.0.3, =0.3.0, =0.3.0, =0.1.0, =0.0.0.77, =0.0.0.79 -...

packagedquestgenforlambda (>=1.0.0, <=1.0.3) potentially affected by CVE-2026-31221 via pytorch-lightning (0.8.1)

pytorch-lightning PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - packagedquestgenforlambda =1.0.0, =1.0.3 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

hypast (>=0.0.5, <=0.0.7), solo-learn (1.0.2) potentially affected by CVE-2026-31221 via pytorch-lightning (1.4.7)

pytorch-lightning PYPI version 1.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - hypast =0.0.5, =0.0.7 - solo-learn 1.0.2 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

disent (>=0.0.1.dev12, <=0.0.1.dev14), neureca (0.0.1) potentially affected by CVE-2026-31221 via pytorch-lightning (1.2.7)

pytorch-lightning PYPI version 1.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - disent =0.0.1.dev12, =0.0.1.dev14 - neureca 0.0.1 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

anomalib (>=0.2.2, <=0.2.4), wildtime (>=1.0.0, <=1.1.3) potentially affected by CVE-2026-31221 via pytorch-lightning (1.3.6)

pytorch-lightning PYPI version 1.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - anomalib =0.2.2, =1.0.0, =1.1.3 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

mofreinforce (>=0.0.2, <=1.0.1) potentially affected by CVE-2026-31221 via pytorch-lightning (1.8.0)

pytorch-lightning PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - mofreinforce =0.0.2, =1.0.1 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

baal (1.2.1), dpm360-lightsaber (>=0.2.0, <=0.2.5) +7 more potentially affected by CVE-2026-31221 via pytorch-lightning (0.8.5)

pytorch-lightning PYPI version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - baal 1.2.1 - dpm360-lightsaber =0.2.0, =0.1.0, =2.0.0, =0.1.2, =0.1.0, =0.0.3, =0.0.970 Source cves: CVE-2026-31221 Source...

dataset-format-benchmark (0.0.10) potentially affected by CVE-2026-31221 via pytorch-lightning (1.9.2)

pytorch-lightning PYPI version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - dataset-format-benchmark 0.0.10 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

yolort (0.4.0) potentially affected by CVE-2026-31221 via pytorch-lightning (1.3.0rc1)

pytorch-lightning PYPI version 1.3.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - yolort 0.4.0 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

chemprobe (0.1.1), dlk (>=0.0.6, <=0.0.10) potentially affected by CVE-2026-31221 via pytorch-lightning (1.5.8)

pytorch-lightning PYPI version 1.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - chemprobe 0.1.1 - dlk =0.0.6, =0.0.10 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

bigdl-chronos (2.0.0), bigdl-chronos-spark2 (2.0.0) +10 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.6.4)

pytorch-lightning PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bigdl-chronos 2.0.0 - bigdl-chronos-spark2 2.0.0 - bigdl-chronos-spark3 2.0.0 - dicee =0.0.2, =0.1.5, =0.0.2, =0.0.3, =1.0.0,...

deepts-forecasting (>=0.1.0, <=0.1.2), eugene-tools (>=0.0.1, <=0.0.6) +6 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.5.10)

pytorch-lightning PYPI version 1.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - deepts-forecasting =0.1.0, =0.0.1, =0.5.0, =1.1.2, =1.0.19, =0.1.0, =1.0.3 Source cves: CVE-2026-31221 Source advisory:...

moai-mdk (>=0.1.1a1, <=0.1.5a34), openstf (2.6.3) potentially affected by CVE-2026-31221 via pytorch-lightning (1.5.1)

pytorch-lightning PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - moai-mdk =0.1.1a1, =0.1.5a34 - openstf 2.6.3 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

pytorch-vision-classifier (>=0.0.4, <=0.0.8), train-and-deploy (>=0.1.1a0, <=0.1.4) +2 more potentially affected by CVE-2026-2614 via mlflow (1.10.0)

mlflow PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - pytorch-vision-classifier =0.0.4, =0.1.1a0, =0.4.1, =0.4.2 - waveletai 0.2.4 Source cves: CVE-2026-2614 Source advisory: OSV:PYSEC-2026-2654...

asteroid (>=0.5.2rc0, <=0.5.3), biome-text (3.3.0) +20 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.4.9)

pytorch-lightning PYPI version 1.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.5.2rc0, =0.1.0.dev20211019, =1.0.0, =0.1.0, =0.0.1, =1.0.0, =0.0.0, =0.0.3, =3.0.0, =0.12.1, =0.14.2 and more Sour...

pytorch-quantum (>=0.1.0.dev1, <=0.1.0.dev3) potentially affected by CVE-2026-31221 via pytorch-lightning (1.1.1)

pytorch-lightning PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-quantum =0.1.0.dev1, =0.1.0.dev3 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...