admetica (>=1.3.0, <=1.4.1), adversarial-insight-ml (0.1.0) +135 more potentially affected by CVE-2024-8020 via pytorch-lightning (>=2.0.0rc0, <=2.3.3)

pytorch-lightning PYPI version =2.0.0rc0, =1.3.0, =1.8.15, =1.8.17, =1.8.14, =1.0.0rc1, =0.8.3b20230817, =0.8.3b20230802, =0.1.1, =0.1.0, =0.9.0, =0.9.3 and more Source cves: CVE-2024-8020 Source advisory: SNYK:PYTHON-PYTORCHLIGHTNING-9510929...

benchformer (0.0.1.dev1), nerblackbox (>=0.0.5, <=0.0.10) +1 more potentially affected by CVE-2024-8020 via pytorch-lightning (0.7.1)

pytorch-lightning PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - benchformer 0.0.1.dev1 - nerblackbox =0.0.5, =0.0.10 - nlp-architect 0.5.3 Source cves: CVE-2024-8020 Source advisory:...

databalancer (>=0.0.7, <=0.0.8), torchline (>=0.3.0.0a0, <=0.3.0.1) potentially affected by CVE-2024-8020 via pytorch-lightning (0.7.5)

pytorch-lightning PYPI version 0.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - databalancer =0.0.7, =0.3.0.0a0, =0.3.0.1 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

GHSA-98FP-7V67-4V3Q PyTorch Lightning denial of service vulnerability

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server...

olorenchemengine (>=0.0.0, <=1.0.3), recsys-slates-dataset (>=0.0.5, <=0.0.6) potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.1)

pytorch-lightning PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - olorenchemengine =0.0.0, =0.0.5, =0.0.6 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

bigdl (2.0.0), bigdl-spark2 (2.0.0) +9 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.2)

pytorch-lightning PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bigdl 2.0.0 - bigdl-spark2 2.0.0 - bigdl-spark3 2.0.0 - classy-imaginary 0.3.5 - imaginairy =0.7.2, =1.1.1rc2, =2.0.14, =2.1.0...

pytorch-segmentation-models-trainer (0.7.0), ratsnlp (0.0.9993) potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.7)

pytorch-lightning PYPI version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-segmentation-models-trainer 0.7.0 - ratsnlp 0.0.9993 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V...

gradsflow (>=0.0.1b1, <=0.0.3), pytorch-lightning-spells (>=0.0.4, <=0.0.5) potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.0)

pytorch-lightning PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - gradsflow =0.0.1b1, =0.0.4, =0.0.5 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

eargait (3.0.0), npvcc2016 (1.2.0) +1 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.5.3)

pytorch-lightning PYPI version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - eargait 3.0.0 - npvcc2016 1.2.0 - pytorch-segmentation-models-trainer =0.16.0, =0.16.1 Source cves: CVE-2024-8020 Source...

chemprobe (0.1.1), dlk (>=0.0.6, <=0.0.10) potentially affected by CVE-2024-8020 via pytorch-lightning (1.5.8)

pytorch-lightning PYPI version 1.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - chemprobe 0.1.1 - dlk =0.0.6, =0.0.10 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

finetuning-scheduler (0.3.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.8.0.post1)

pytorch-lightning PYPI version 1.8.0.post1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.3.0 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

finetuning-scheduler (0.3.2), lightning-hpo (0.0.5) potentially affected by CVE-2024-8020 via pytorch-lightning (1.8.2)

pytorch-lightning PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.3.2 - lightning-hpo 0.0.5 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

locate-model (>=0.0.1, <=0.0.3) potentially affected by CVE-2024-8020 via pytorch-lightning (1.8.3)

pytorch-lightning PYPI version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - locate-model =0.0.1, =0.0.3 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

chemprobe (0.1.5), finetuning-scheduler (0.3.3) +1 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.8.4)

pytorch-lightning PYPI version 1.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - chemprobe 0.1.5 - finetuning-scheduler 0.3.3 - uncertainty-estimation-models 0.1.0 Source cves: CVE-2024-8020 Source advisory:...

asteroid (>=0.5.0rc0, <=0.5.0), backprop (>=0.0.3, <=0.1.3) +12 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.2.10)

pytorch-lightning PYPI version 1.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.5.0rc0, =0.0.3, =0.3.0b1, =1.0.0, =0.3.1.0, =2.0.0, =1.0.4, =0.8.1, =1.0.0, =0.1.0, =0.2.0 Source cves:...

gradattack (>=0.1.1, <=0.1.2), openue (>=0.2.3, <=0.2.5) potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.1)

pytorch-lightning PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - gradattack =0.1.1, =0.2.3, =0.2.5 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

lightning-flash (>=0.1.0, <=0.2.1) potentially affected by CVE-2024-8020 via pytorch-lightning (1.2.0rc0)

pytorch-lightning PYPI version 1.2.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - lightning-flash =0.1.0, =0.2.1 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

harmonai-tools (0.0.5), neuralprophet (>=0.5.0rc1, <=0.5.1) +1 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.7.4)

pytorch-lightning PYPI version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - harmonai-tools 0.0.5 - neuralprophet =0.5.0rc1, =1.0.2, =1.0.4 Source cves: CVE-2024-8020 Source advisory:...

dimweb-persona-bot (0.0.6), finetuning-scheduler (0.2.2) +1 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.7.6)

pytorch-lightning PYPI version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - dimweb-persona-bot 0.0.6 - finetuning-scheduler 0.2.2 - gts-engine 0.1.3 Source cves: CVE-2024-8020 Source advisory:...

asteroid (>=0.6.1rc0, <=0.6.1), autogluon (>=0.5.3b20221006, <=0.5.3) +28 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.7.7)

pytorch-lightning PYPI version 1.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.6.1rc0, =0.5.3b20221006, =0.5.3b20221006, =0.5.3b20221006, =0.5.3b20221029, =0.0.1, =0.2.0, =2.2.4.5, =0.0.1,...