nf2 (0.3.0), pinn-me (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-31221 via lightning (1.9.3)

lightning PYPI version 1.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - nf2 0.3.0 - pinn-me =0.1.0, =0.1.1 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3972...

admetica (>=1.3.0, <=1.4.1), aestetik (0.1.0) +200 more potentially affected by CVE-2026-31221 via lightning (>=2.0.0rc0, <=2.6.0)

lightning PYPI version =2.0.0rc0, =1.3.0, =1.9.0, =1.9.0, =1.0.0rc1, =0.3.24, =1.0.0, =1.4.1b20251129, =0.8.3b20230916, =0.8.3b20230916, =1.5.1b20260722 and more Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3972...

harmonai-tools (0.0.5), neuralprophet (>=0.5.0rc1, <=0.5.1) +1 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.7.4)

pytorch-lightning PYPI version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - harmonai-tools 0.0.5 - neuralprophet =0.5.0rc1, =1.0.2, =1.0.4 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-304...

cluster-depp-test (0.0.2), depp (>=0.1.9, <=0.2.3) +2 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.0.5)

pytorch-lightning PYPI version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cluster-depp-test 0.0.2 - depp =0.1.9, =0.0.1, =0.0.3 - pytorch-lightning-help 0.0.1 Source cves: CVE-2026-31221 Source...

mofreinforce (>=0.0.2, <=1.0.1) potentially affected by CVE-2026-31221 via pytorch-lightning (1.8.0)

pytorch-lightning PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - mofreinforce =0.0.2, =1.0.1 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

baal (1.2.1), dpm360-lightsaber (>=0.2.0, <=0.2.5) +7 more potentially affected by CVE-2026-31221 via pytorch-lightning (0.8.5)

pytorch-lightning PYPI version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - baal 1.2.1 - dpm360-lightsaber =0.2.0, =0.1.0, =2.0.0, =0.1.2, =0.1.0, =0.0.3, =0.0.970 Source cves: CVE-2026-31221 Source...

dataset-format-benchmark (0.0.10) potentially affected by CVE-2026-31221 via pytorch-lightning (1.9.2)

pytorch-lightning PYPI version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - dataset-format-benchmark 0.0.10 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

yolort (0.4.0) potentially affected by CVE-2026-31221 via pytorch-lightning (1.3.0rc1)

pytorch-lightning PYPI version 1.3.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - yolort 0.4.0 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

moai-mdk (>=0.1.1a1, <=0.1.5a34), openstf (2.6.3) potentially affected by CVE-2026-31221 via pytorch-lightning (1.5.1)

pytorch-lightning PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - moai-mdk =0.1.1a1, =0.1.5a34 - openstf 2.6.3 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

asteroid (>=0.5.2rc0, <=0.5.3), biome-text (3.3.0) +20 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.4.9)

pytorch-lightning PYPI version 1.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.5.2rc0, =0.1.0.dev20211019, =1.0.0, =0.1.0, =0.0.1, =1.0.0, =0.0.0, =0.0.3, =3.0.0, =0.12.1, =0.14.2 and more Sour...

pytorch-quantum (>=0.1.0.dev1, <=0.1.0.dev3) potentially affected by CVE-2026-31221 via pytorch-lightning (1.1.1)

pytorch-lightning PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-quantum =0.1.0.dev1, =0.1.0.dev3 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

asteroid (>=0.1.1, <=0.2.0), torchline (>=0.2.0, <=0.2.4.3) potentially affected by CVE-2026-31221 via pytorch-lightning (0.6.0)

pytorch-lightning PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.1.1, =0.2.0, =0.2.4.3 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

classy-core (0.1.0a0), iqradre (>=0.1.5, <=0.2.1) +2 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.4.5)

pytorch-lightning PYPI version 1.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - classy-core 0.1.0a0 - iqradre =0.1.5, =1.0.0, =1.1.1 - torchility 0.2.10 Source cves: CVE-2026-31221 Source advisory:...

nemo-toolkit (1.0.0rc1) potentially affected by CVE-2026-31221 via pytorch-lightning (1.1.5)

pytorch-lightning PYPI version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - nemo-toolkit 1.0.0rc1 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3043...

intrepppid (0.1.0) potentially affected by CVE-2026-31221 via pytorch-lightning (1.9.1)

pytorch-lightning PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - intrepppid 0.1.0 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

admetica (>=1.3.0, <=1.4.1), adversarial-insight-ml (0.1.0) +181 more potentially affected by CVE-2026-31221 via pytorch-lightning (>=2.0.0rc0, <=2.6.0)

pytorch-lightning PYPI version =2.0.0rc0, =1.3.0, =1.8.15, =1.8.17, =1.8.14, =1.0.0, =0.9.2, =1.0.0rc1, =0.8.3b20230817, =0.8.3b20230802, =0.1.1, =0.2.2 and more Source cves: CVE-2026-31221 Source advisory: GHSA-75M9-98V2-HJPM...

code2seq (>=0.0.0, <=0.0.4), disent (>=0.0.1.dev1, <=0.0.1.dev11) +3 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.1.7)

pytorch-lightning PYPI version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - code2seq =0.0.0, =0.0.1.dev1, =0.3.0.0, =0.0.0.4, =0.0.0.8 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJP...

pytorch-segmentation-models-trainer (0.7.0), ratsnlp (0.0.9993) potentially affected by CVE-2026-31221 via pytorch-lightning (1.3.7)

pytorch-lightning PYPI version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-segmentation-models-trainer 0.7.0 - ratsnlp 0.0.9993 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-H...

torchok (0.4.12) potentially affected by CVE-2026-31221 via pytorch-lightning (1.8.4.post0)

pytorch-lightning PYPI version 1.8.4.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - torchok 0.4.12 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

olorenchemengine (>=0.0.0, <=1.0.3), recsys-slates-dataset (>=0.0.5, <=0.0.6) potentially affected by CVE-2026-31221 via pytorch-lightning (1.4.1)

pytorch-lightning PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - olorenchemengine =0.0.0, =0.0.5, =0.0.6 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...