asteroid (>=0.3.5, <=0.4.0), coreml (>=0.0.10, <=0.0.15) +8 more potentially affected by CVE-2024-8019 via pytorch-lightning (0.9.0)

pytorch-lightning PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.3.5, =0.0.10, =0.0.1, =0.0.2.post1, =1.0.0a4, =0.4.1, =0.2.1, =0.13.6, =0.1.0, =0.1.1 - torch-factorization-models...

argos-trains (0.1.0), fastmri (>=0.1.0.post210716, <=0.1.1) +5 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.0.8)

pytorch-lightning PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - argos-trains 0.1.0 - fastmri =0.1.0.post210716, =0.5.1, =0.5.3 - quickvision 0.1.1rc1 - raylab 0.14.12 Source cves:...

asteroid (>=0.1.1, <=0.2.0), torchline (>=0.2.0, <=0.2.4.3) potentially affected by CVE-2024-8019 via pytorch-lightning (0.6.0)

pytorch-lightning PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.1.1, =0.2.0, =0.2.4.3 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

simple-leftrefill-inpainting (0.0.1), tldream (>=0.1.0, <=0.4.1) potentially affected by CVE-2024-8019 via pytorch-lightning (1.5.0)

pytorch-lightning PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - simple-leftrefill-inpainting 0.0.1 - tldream =0.1.0, =0.4.1 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFH...

eargait (3.0.0), npvcc2016 (1.2.0) +1 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.5.3)

pytorch-lightning PYPI version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - eargait 3.0.0 - npvcc2016 1.2.0 - pytorch-segmentation-models-trainer =0.16.0, =0.16.1 Source cves: CVE-2024-8019 Source...

clarinpl-embeddings (>=0.0.1rc158803945536, <=0.0.1rc158956732038), cluster-depp-test (>=0.0.3, <=0.0.21) +5 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.5.4)

pytorch-lightning PYPI version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - clarinpl-embeddings =0.0.1rc158803945536, =0.0.3, =0.3.0, =0.3.0, =0.1.0, =0.0.0.77, =0.0.0.79 -...

chemprobe (0.1.1), dlk (>=0.0.6, <=0.0.10) potentially affected by CVE-2024-8019 via pytorch-lightning (1.5.8)

pytorch-lightning PYPI version 1.5.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - chemprobe 0.1.1 - dlk =0.0.6, =0.0.10 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

debias-m (0.0.1), dlk (>=0.0.11, <=0.0.14) +4 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.6.0)

pytorch-lightning PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - debias-m 0.0.1 - dlk =0.0.11, =1.1.0, =1.1.1 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

ablation (0.1.0), deepethogram (>=0.3.0, <=0.5.0) +7 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.6.5)

pytorch-lightning PYPI version 1.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - ablation 0.1.0 - deepethogram =0.3.0, =0.0.15, =1.4.0, =1.0.0, =0.1.0, =0.1.2 - run-crom 1.0.0 Source cves: CVE-2024-8019 Sour...

quickvision (>=0.2.0rc1, <=0.2.1) potentially affected by CVE-2024-8019 via pytorch-lightning (1.2.6)

pytorch-lightning PYPI version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - quickvision =0.2.0rc1, =0.2.1 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

disent (>=0.0.1.dev12, <=0.0.1.dev14), neureca (0.0.1) potentially affected by CVE-2024-8019 via pytorch-lightning (1.2.7)

pytorch-lightning PYPI version 1.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - disent =0.0.1.dev12, =0.0.1.dev14 - neureca 0.0.1 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

autogluon (>=0.4.1b20220511, <=0.5.3b20221005), autogluon-multimodal (>=0.4.3b20220616, <=0.5.3b20221005) +38 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.6.5.post0)

pytorch-lightning PYPI version 1.6.5.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon =0.4.1b20220511, =0.4.3b20220616, =0.4.1b20220511, =1.0.0, =0.1.3, =0.5.33, =0.1.5, =0.6.0, =0.6.1, =0.47.0,...

asteroid (>=0.6.1rc0, <=0.6.1), autogluon (>=0.5.3b20221006, <=0.5.3) +28 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.7.7)

pytorch-lightning PYPI version 1.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.6.1rc0, =0.5.3b20221006, =0.5.3b20221006, =0.5.3b20221006, =0.5.3b20221029, =0.0.1, =0.2.0, =2.2.4.5, =0.0.1,...

anomalib (>=0.4.0rc2, <=1.0.0.dev0), ast-slizovskaia (>=0.1.1, <=0.1.4) +149 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.9.5)

pytorch-lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - anomalib =0.4.0rc2, =0.1.1, =0.1.0, =0.3.2b20220218, =0.6.3b20230121, =0.6.3b20230210, =0.5.62, =0.1.3, =3.3.0, =0.0.1, =0.1.0...

admetica (>=1.3.0, <=1.4.1), adversarial-insight-ml (0.1.0) +135 more potentially affected by CVE-2024-8019 via pytorch-lightning (>=2.0.0rc0, <=2.3.3)

pytorch-lightning PYPI version =2.0.0rc0, =1.3.0, =1.8.15, =1.8.17, =1.8.14, =1.0.0rc1, =0.8.3b20230817, =0.8.3b20230802, =0.1.1, =0.1.0, =0.9.0, =0.9.3 and more Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

route-distances (>=1.2.0, <=1.2.4) potentially affected by CVE-2024-8019 via pytorch-lightning (1.8.3.post2)

pytorch-lightning PYPI version 1.8.3.post2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - route-distances =1.2.0, =1.2.4 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

torchok (0.4.12) potentially affected by CVE-2024-8019 via pytorch-lightning (1.8.4.post0)

pytorch-lightning PYPI version 1.8.4.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - torchok 0.4.12 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

finetuning-scheduler (0.3.0) potentially affected by CVE-2024-8019 via pytorch-lightning (1.8.0.post1)

pytorch-lightning PYPI version 1.8.0.post1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.3.0 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

cookiellmtest (>=1.0.1, <=1.0.6), cookienlp (>=1.0.0, <=1.0.2) +3 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.6.1)

pytorch-lightning PYPI version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cookiellmtest =1.0.1, =1.0.0, =1.0.52, =1.0.53 - smallteacher 0.0.1 Source cves: CVE-2024-8019 Source advisory:...

CVE-2024-8020

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server...