CVE-2026-44484 Compromise of PyTorch Lightning PyPi Package Versions

PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a credential harvesting mechanism...

aana (>=0.2.1, <=0.2.2.2), adaptive-kmpc-py (>=0.1.0, <=0.1.1) +1080 more potentially affected by CVE-2026-44484 via lightning (>=1.8.6, <=2.6.5)

lightning PYPI version =1.8.6, =0.2.1, =0.1.0, =2.0.0, =1.3.0, =0.2.0, =0.1.0, =1.0.1, =0.1.0, =2025.4.0, =0.0.0, =0.1.11, =1.8.15, =1.8.17, =1.8.19 - ailoganalyzer 1.0.0 and more Source cves: CVE-2026-44484 Source advisory: SNYK:PYTHON-LIGHTNING-16323121...