pytorch-segmentation-models-trainer (0.15.0) potentially affected by CVE-2026-31221 via pytorch-lightning (1.5.2)

pytorch-lightning PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-segmentation-models-trainer 0.15.0 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

harmonai-tools (0.0.5), neuralprophet (>=0.5.0rc1, <=0.5.1) +1 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.7.4)

pytorch-lightning PYPI version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - harmonai-tools 0.0.5 - neuralprophet =0.5.0rc1, =1.0.2, =1.0.4 Source cves: CVE-2026-31221 Source advisory:...

finetuning-scheduler (0.3.2), lightning-hpo (0.0.5) potentially affected by CVE-2026-31221 via pytorch-lightning (1.8.2)

pytorch-lightning PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.3.2 - lightning-hpo 0.0.5 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

locate-model (>=0.0.1, <=0.0.3) potentially affected by CVE-2026-31221 via pytorch-lightning (1.8.3)

pytorch-lightning PYPI version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - locate-model =0.0.1, =0.0.3 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

moai-mdk (>=0.1.0a1, <=0.1.0a2) potentially affected by CVE-2026-31221 via pytorch-lightning (1.0.7)

pytorch-lightning PYPI version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - moai-mdk =0.1.0a1, =0.1.0a2 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

torchok (0.4.12) potentially affected by CVE-2026-31221 via pytorch-lightning (1.8.4.post0)

pytorch-lightning PYPI version 1.8.4.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - torchok 0.4.12 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

acids-msprior (>=1.0.1, <=1.1.3), acids-rave (>=2.1.16, <=2.3.1) +9 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.9.0)

pytorch-lightning PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - acids-msprior =1.0.1, =2.1.16, =0.0.2, =0.0.1, =0.2.6, =0.4.9, =0.4.0, =0.7.5 - swyft 0.4.2 - tencent-wedata-auto-ml 0.2.39...

dataset-format-benchmark (0.0.10) potentially affected by CVE-2026-31221 via pytorch-lightning (1.9.2)

pytorch-lightning PYPI version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - dataset-format-benchmark 0.0.10 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

geniverse (>=0.0.1, <=0.0.12.12), hugging-gan-test (>=0.0.1, <=0.2.29) +1 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.3.3)

pytorch-lightning PYPI version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - geniverse =0.0.1, =0.0.1, =0.2.29 - ratsnlp 0.0.9983 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

github-acc-test (>=0.0.1, <=0.3.1), libmultilabel (>=0.0.1, <=0.1.4) +3 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.3.5)

pytorch-lightning PYPI version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - github-acc-test =0.0.1, =0.0.1, =0.0.1rc1, =0.1.0, =1.0.0rc1, =1.0.1 Source cves: CVE-2026-31221 Source advisory:...

eargait (3.0.0), npvcc2016 (1.2.0) +1 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.5.3)

pytorch-lightning PYPI version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - eargait 3.0.0 - npvcc2016 1.2.0 - pytorch-segmentation-models-trainer =0.16.0, =0.16.1 Source cves: CVE-2026-31221 Source...

admetica (>=1.3.0, <=1.4.1), adversarial-insight-ml (0.1.0) +183 more potentially affected by CVE-2026-31221 via pytorch-lightning (>=2.0.0rc0, <=2.6.0)

pytorch-lightning PYPI version =2.0.0rc0, =1.3.0, =1.8.15, =1.8.17, =1.8.14, =1.0.0, =0.9.2, =1.0.0rc1, =0.8.3b20230817, =0.8.3b20230802, =0.1.1, =0.2.2 and more Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

GHSA-75M9-98V2-HJPM PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization

PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability CWE-502 in the checkpoint loading mechanism. The LightningModule.loadfromcheckpoint method, which is commonly used to load saved model states, internally calls torch.load without setting the...

admetica (>=1.3.0, <=1.4.1), adversarial-insight-ml (0.1.0) +183 more potentially affected by CVE-2026-31221 via pytorch-lightning (>=2.0.0rc0, <=2.6.0)

pytorch-lightning PYPI version =2.0.0rc0, =1.3.0, =1.8.15, =1.8.17, =1.8.14, =1.0.0, =0.9.2, =1.0.0rc1, =0.8.3b20230817, =0.8.3b20230802, =0.1.1, =0.2.2 and more Source cves: CVE-2026-31221 Source advisory: GHSA-75M9-98V2-HJPM...

bigdl-chronos (2.0.0), bigdl-chronos-spark2 (2.0.0) +10 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.6.4)

pytorch-lightning PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bigdl-chronos 2.0.0 - bigdl-chronos-spark2 2.0.0 - bigdl-chronos-spark3 2.0.0 - dicee =0.0.2, =0.1.5, =0.0.2, =0.0.3, =1.0.0,...

finetuning-scheduler (0.2.1), nlhappy (2022.9.14) +1 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.7.1)

pytorch-lightning PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.2.1 - nlhappy 2022.9.14 - pytorch-segmentation-models-trainer 0.17.0 Source cves: CVE-2026-31221 Source...

code2seq (>=0.0.0, <=0.0.4), disent (>=0.0.1.dev1, <=0.0.1.dev11) +3 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.1.7)

pytorch-lightning PYPI version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - code2seq =0.0.0, =0.0.1.dev1, =0.3.0.0, =0.0.0.4, =0.0.0.8 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJP...

asteroid (>=0.5.0rc0, <=0.5.0), backprop (>=0.0.3, <=0.1.3) +12 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.2.10)

pytorch-lightning PYPI version 1.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.5.0rc0, =0.0.3, =0.3.0b1, =1.0.0, =0.3.1.0, =2.0.0, =1.0.4, =0.8.1, =1.0.0, =0.1.0, =0.2.0 Source cves:...

gradattack (>=0.1.1, <=0.1.2), openue (>=0.2.3, <=0.2.5) potentially affected by CVE-2026-31221 via pytorch-lightning (1.3.1)

pytorch-lightning PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - gradattack =0.1.1, =0.2.3, =0.2.5 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...

ratsnlp (>=0.0.9981, <=1.0.51) potentially affected by CVE-2026-31221 via pytorch-lightning (1.3.4)

pytorch-lightning PYPI version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - ratsnlp =0.0.9981, =1.0.51 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...