nemo-toolkit (1.1.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.7.post0)

pytorch-lightning PYPI version 1.3.7.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - nemo-toolkit 1.1.0 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

bio-transformers (>=0.0.7, <=0.1.2), biome-text (>=3.0.0, <=3.2.1) +21 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.8)

pytorch-lightning PYPI version 1.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bio-transformers =0.0.7, =3.0.0, =0.5.9, =0.1.0, =0.0.22, =0.0.11, =0.7.1, =0.4.5, =0.4.6 and more Source cves: CVE-2024-8020...

gradsflow (>=0.0.1b1, <=0.0.3), pytorch-lightning-spells (>=0.0.4, <=0.0.5) potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.0)

pytorch-lightning PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - gradsflow =0.0.1b1, =0.0.4, =0.0.5 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

classy-core (0.1.0a0), iqradre (>=0.1.5, <=0.2.1) +2 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.5)

pytorch-lightning PYPI version 1.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - classy-core 0.1.0a0 - iqradre =0.1.5, =1.0.0, =1.1.1 - torchility 0.2.10 Source cves: CVE-2024-8020 Source advisory:...

databalancer (>=0.0.7, <=0.0.8), torchline (>=0.3.0.0a0, <=0.3.0.1) potentially affected by CVE-2024-8020 via pytorch-lightning (0.7.5)

pytorch-lightning PYPI version 0.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - databalancer =0.0.7, =0.3.0.0a0, =0.3.0.1 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

pytorch-segmentation-models-trainer (0.11.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.3)

pytorch-lightning PYPI version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-segmentation-models-trainer 0.11.0 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

cookiellmtest (>=1.0.1, <=1.0.6), cookienlp (>=1.0.0, <=1.0.2) +3 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.6.1)

pytorch-lightning PYPI version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cookiellmtest =1.0.1, =1.0.0, =1.0.52, =1.0.53 - smallteacher 0.0.1 Source cves: CVE-2024-8020 Source advisory:...

cogexquestgen (>=1.0.0, <=1.0.3), deepmorpheus (>=0.2.1, <=0.2.3) potentially affected by CVE-2024-8020 via pytorch-lightning (0.8.4)

pytorch-lightning PYPI version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cogexquestgen =1.0.0, =0.2.1, =0.2.3 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

deep-learning-plus (>=0.0.5, <=0.0.7), torchfl (>=0.1.1, <=0.1.5) potentially affected by CVE-2024-8020 via pytorch-lightning (1.5.7)

pytorch-lightning PYPI version 1.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - deep-learning-plus =0.0.5, =0.1.1, =0.1.5 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

intrepppid (0.1.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.9.1)

pytorch-lightning PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - intrepppid 0.1.0 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

asteroid (>=0.5.0rc0, <=0.5.0), backprop (>=0.0.3, <=0.1.3) +12 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.2.10)

pytorch-lightning PYPI version 1.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.5.0rc0, =0.0.3, =0.3.0b1, =1.0.0, =0.3.1.0, =2.0.0, =1.0.4, =0.8.1, =1.0.0, =0.1.0, =0.2.0 Source cves:...

hypast (>=0.0.5, <=0.0.7), solo-learn (1.0.2) potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.7)

pytorch-lightning PYPI version 1.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - hypast =0.0.5, =0.0.7 - solo-learn 1.0.2 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

PyTorch Lightning denial of service vulnerability

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server...

mofreinforce (>=0.0.2, <=1.0.1) potentially affected by CVE-2024-8020 via pytorch-lightning (1.8.0)

pytorch-lightning PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - mofreinforce =0.0.2, =1.0.1 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

pytorch-quantum (>=0.1.0.dev1, <=0.1.0.dev3) potentially affected by CVE-2024-8020 via pytorch-lightning (1.1.1)

pytorch-lightning PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-quantum =0.1.0.dev1, =0.1.0.dev3 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

PYSEC-2026-1857 PyTorch Lightning denial of service vulnerability

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server...

code2seq (>=0.0.0, <=0.0.4), disent (>=0.0.1.dev1, <=0.0.1.dev11) +3 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.1.7)

pytorch-lightning PYPI version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - code2seq =0.0.0, =0.0.1.dev1, =0.3.0.0, =0.0.0.4, =0.0.0.8 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

disent (>=0.0.1.dev12, <=0.0.1.dev14), neureca (0.0.1) potentially affected by CVE-2024-8020 via pytorch-lightning (1.2.7)

pytorch-lightning PYPI version 1.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - disent =0.0.1.dev12, =0.0.1.dev14 - neureca 0.0.1 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

autogluon-timeseries (>=0.6.3b20230121, <=0.6.3b20230209), contra-il6 (>=1.0.1, <=1.0.4) +17 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.8.6)

pytorch-lightning PYPI version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon-timeseries =0.6.3b20230121, =1.0.1, =1.2.5, =1.3.2, =0.2.0, =0.1.2, =4.0.0rc0, =1.2.43, =1.0.0, =0.1.0, =0.2.1 -...

finetuning-scheduler (0.3.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.8.0.post1)

pytorch-lightning PYPI version 1.8.0.post1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.3.0 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...