bigdl (2.0.0), bigdl-spark2 (2.0.0) +9 more potentially affected by CVE-2026-58659 via pytorch-lightning (1.4.2)

pytorch-lightning PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bigdl 2.0.0 - bigdl-spark2 2.0.0 - bigdl-spark3 2.0.0 - classy-imaginary 0.3.5 - imaginairy =0.7.2, =1.1.1rc2, =2.0.14, =2.1.0...

bigdl-chronos (2.0.0), bigdl-chronos-spark2 (2.0.0) +10 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.6.4)

pytorch-lightning PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bigdl-chronos 2.0.0 - bigdl-chronos-spark2 2.0.0 - bigdl-chronos-spark3 2.0.0 - dicee =0.0.2, =0.1.5, =0.0.2, =0.0.3, =1.0.0,...

com.intel.analytics.bigdl:bigdl (0.13.0), com.intel.analytics.bigdl:bigdl-assembly-spark_2.4.6 (>=2.0.0, <=2.3.0) +32 more potentially affected by CVE-2026-42440 via org.apache.opennlp:opennlp-tools (1.8.2)

org.apache.opennlp:opennlp-tools MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.opennlp:opennlp-tools and may be impacted: - com.intel.analytics.bigdl:bigdl 0.13.0 - com.intel.analytics.bigdl:bigdl-assembly-spark2.4.6...

analytics-zoo (>=0.5.0, <=0.10.0), bigdl (>=0.11.0, <=0.13.0.dev0) +4 more potentially affected by CVE-2025-55039 via pyspark (2.4.3)

pyspark PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - analytics-zoo =0.5.0, =0.11.0, =0.1.0, =0.1.2, =0.1.8 Source cves: CVE-2025-55039 Source advisory: OSV:GHSA-6P6V-M64V-JX8Q...

EUVD-2024-26124

Malicious code in bioql PyPI...

EUVD-2024-25300

Malicious code in bioql PyPI...

CVE-2024-29085

Improper access control for some BigDL software maintained by IntelR before version 2.5.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-28169

Cleartext transmission of sensitive information for some BigDL software maintained by IntelR before version 2.5.0 may allow an authenticated user to potentially enable denial of service via adjacent access...

agent-smith (0.1.1), aixlab-cn-pre (0.1.0) +89 more potentially affected by CVE-2025-2998 via torch (1.9.0)

torch PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on torch and may be impacted: - agent-smith 0.1.1 - aixlab-cn-pre 0.1.0 - audacitorch =0.0.1, =0.1.2, =1.0.2, =1.35.0, =0.0.1rc19, =0.2.0.dev20220120, =0.2.1 and more Source cves:...

BigDL Access Control Privilege Escalation

The vulnerability of BigDL software is related to errors in access control. Exploiting this vulnerability can allow a remote attacker to enhance their privileges...

BigDL Transmission Information DoS

The vulnerability of BigDL software is related to the transmission of critical information in open text. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

CVE-2024-29085

Improper access control for some BigDL software maintained by IntelR before version 2.5.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-28169

Cleartext transmission of sensitive information for some BigDL software maintained by IntelR before version 2.5.0 may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2024-28169

CVE-2024-28169 affects Intel BigDL software prior to version 2.5.0. The issue is cleartext transmission of sensitive information, which could allow an authenticated user to potentially cause a denial of service via adjacent access. The advisory from Intel lists BigDL as the affected product and r...

CVE-2024-28169

Cleartext transmission of sensitive information for some BigDL software maintained by IntelR before version 2.5.0 may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2024-29085

Improper access control for some BigDL software maintained by IntelR before version 2.5.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-29085

Improper access control for some BigDL software maintained by IntelR before version 2.5.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-29085

CVE-2024-29085 affects Intel BigDL software prior to version 2.5.0. The issue is improper access control that may allow an authenticated user to escalate privileges via adjacent access. Intel’s advisory confirms the affected product and recommends upgrading to BigDL 2.5.0 or later to mitigate. Af...

Intel BigDL 访问控制错误漏洞

Intel BigDL is an application from Intel Corporation USA. A security vulnerability exists in Intel BigDL versions prior to 2.5.0 that stems from improper access control. An attacker can exploit the vulnerability to elevate privileges...

Intel BigDL 安全漏洞

Intel BigDL is an application from Intel Corporation USA. A security vulnerability exists in Intel BigDL versions prior to 2.5.0 that originates from allowing sensitive information to be transmitted in clear text. An attacker exploiting this vulnerability could cause a denial of service on the...