asteroid (>=0.3.1rc0, <=0.3.2), borisml (>=0.0.2, <=0.1.0) +3 more potentially affected by CVE-2024-8019 via pytorch-lightning (0.7.6)

pytorch-lightning PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.3.1rc0, =0.0.2, =0.1.0, =0.3.0.2, =0.3.0.4 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

classy-core (>=0.2.1.dev20220303, <=0.2.1), open-metric-learning (>=0.3.0, <=0.3.6) potentially affected by CVE-2024-8019 via pytorch-lightning (1.5.9)

pytorch-lightning PYPI version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - classy-core =0.2.1.dev20220303, =0.3.0, =0.3.6 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

PyTorch Lightning path traversal vulnerability

In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the LightningApp when running on a Windows host. The vulnerability occurs at the /api/v1/uploadfile/ endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to...

mimikit (>=0.2.3, <=0.2.6) potentially affected by CVE-2024-8019 via pytorch-lightning (1.2.4)

pytorch-lightning PYPI version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - mimikit =0.2.3, =0.2.6 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

asteroid (>=0.5.0rc0, <=0.5.0), backprop (>=0.0.3, <=0.1.3) +12 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.2.10)

pytorch-lightning PYPI version 1.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.5.0rc0, =0.0.3, =0.3.0b1, =1.0.0, =0.3.1.0, =2.0.0, =1.0.4, =0.8.1, =1.0.0, =0.1.0, =0.2.0 Source cves:...

ratsnlp (>=0.0.9981, <=1.0.51) potentially affected by CVE-2024-8019 via pytorch-lightning (1.3.4)

pytorch-lightning PYPI version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - ratsnlp =0.0.9981, =1.0.51 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

bigdl (2.0.0), bigdl-spark2 (2.0.0) +9 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.4.2)

pytorch-lightning PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bigdl 2.0.0 - bigdl-spark2 2.0.0 - bigdl-spark3 2.0.0 - classy-imaginary 0.3.5 - imaginairy =0.7.2, =1.1.1rc2, =2.0.14, =2.1.0...

classy-core (0.1.0a0), iqradre (>=0.1.5, <=0.2.1) +2 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.4.5)

pytorch-lightning PYPI version 1.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - classy-core 0.1.0a0 - iqradre =0.1.5, =1.0.0, =1.1.1 - torchility 0.2.10 Source cves: CVE-2024-8019 Source advisory:...

pytorch-segmentation-models-trainer (0.15.0) potentially affected by CVE-2024-8019 via pytorch-lightning (1.5.2)

pytorch-lightning PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-segmentation-models-trainer 0.15.0 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

bigdl-chronos (2.0.0), bigdl-chronos-spark2 (2.0.0) +10 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.6.4)

pytorch-lightning PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bigdl-chronos 2.0.0 - bigdl-chronos-spark2 2.0.0 - bigdl-chronos-spark3 2.0.0 - dicee =0.0.2, =0.1.5, =0.0.2, =0.0.3, =1.0.0,...

torchline (>=0.1.0, <=0.1.4.2) potentially affected by CVE-2024-8019 via pytorch-lightning (0.5.3.2)

pytorch-lightning PYPI version 0.5.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - torchline =0.1.0, =0.1.4.2 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

benchformer (0.0.1.dev1), nerblackbox (>=0.0.5, <=0.0.10) +1 more potentially affected by CVE-2024-8019 via pytorch-lightning (0.7.1)

pytorch-lightning PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - benchformer 0.0.1.dev1 - nerblackbox =0.0.5, =0.0.10 - nlp-architect 0.5.3 Source cves: CVE-2024-8019 Source advisory:...

axlnlp (0.0.1) potentially affected by CVE-2024-8019 via pytorch-lightning (0.7.3)

pytorch-lightning PYPI version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - axlnlp 0.0.1 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

databalancer (>=0.0.7, <=0.0.8), torchline (>=0.3.0.0a0, <=0.3.0.1) potentially affected by CVE-2024-8019 via pytorch-lightning (0.7.5)

pytorch-lightning PYPI version 0.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - databalancer =0.0.7, =0.3.0.0a0, =0.3.0.1 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

moai-mdk (>=0.1.0a1, <=0.1.0a2) potentially affected by CVE-2024-8019 via pytorch-lightning (1.0.7)

pytorch-lightning PYPI version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - moai-mdk =0.1.0a1, =0.1.0a2 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

code2seq (>=0.0.0, <=0.0.4), disent (>=0.0.1.dev1, <=0.0.1.dev11) +3 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.1.7)

pytorch-lightning PYPI version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - code2seq =0.0.0, =0.0.1.dev1, =0.3.0.0, =0.0.0.4, =0.0.0.8 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

asteroid (>=0.5.2rc0, <=0.5.3), biome-text (3.3.0) +20 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.4.9)

pytorch-lightning PYPI version 1.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.5.2rc0, =0.1.0.dev20211019, =1.0.0, =0.1.0, =0.0.1, =1.0.0, =0.0.0, =0.0.3, =3.0.0, =0.12.1, =0.14.2 and more Sour...

moai-mdk (>=0.1.1a1, <=0.1.5a34), openstf (2.6.3) potentially affected by CVE-2024-8019 via pytorch-lightning (1.5.1)

pytorch-lightning PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - moai-mdk =0.1.1a1, =0.1.5a34 - openstf 2.6.3 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

deepts-forecasting (>=0.1.0, <=0.1.2), eugene-tools (>=0.0.1, <=0.0.6) +6 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.5.10)

pytorch-lightning PYPI version 1.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - deepts-forecasting =0.1.0, =0.0.1, =0.5.0, =1.1.2, =1.0.19, =0.1.0, =1.0.3 Source cves: CVE-2024-8019 Source advisory:...

autogluon (>=0.3.2b20220222, <=0.4.3b20220617), autogluon-text (>=0.3.2b20220222, <=0.4.1b20220510) +29 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.5.10.post0)

pytorch-lightning PYPI version 1.5.10.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon =0.3.2b20220222, =0.3.2b20220222, =0.3.0.dev20220423, =0.1.0, =0.0.1, =0.1.11, =0.0.2, =0.5.0, =1.0.0, =0.0.1...