asteroid (>=0.1.1, <=0.2.0), torchline (>=0.2.0, <=0.2.4.3) potentially affected by CVE-2024-8020 via pytorch-lightning (0.6.0)

pytorch-lightning PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.1.1, =0.2.0, =0.2.4.3 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

torchline (>=0.1.0, <=0.1.4.2) potentially affected by CVE-2024-8020 via pytorch-lightning (0.5.3.2)

pytorch-lightning PYPI version 0.5.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - torchline =0.1.0, =0.1.4.2 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

quickvision (>=0.2.0rc1, <=0.2.1) potentially affected by CVE-2024-8020 via pytorch-lightning (1.2.6)

pytorch-lightning PYPI version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - quickvision =0.2.0rc1, =0.2.1 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

finetuning-scheduler (>=0.1.3, <=0.1.4), mridc (0.1.0) +3 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.6.3)

pytorch-lightning PYPI version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler =0.1.3, =0.1.0, =0.1.2 - vocalforge 0.0.4 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

finetuning-scheduler (0.1.2), gts-engine (>=0.1.1, <=0.1.2) +3 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.6.2)

pytorch-lightning PYPI version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.1.2 - gts-engine =0.1.1, =0.3.3, =0.1.0, =0.1.5 Source cves: CVE-2024-8020 Source advisory:...

finetuning-scheduler (0.3.2), lightning-hpo (0.0.5) potentially affected by CVE-2024-8020 via pytorch-lightning (1.8.2)

pytorch-lightning PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.3.2 - lightning-hpo 0.0.5 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

PYSEC-2026-1857 PyTorch Lightning denial of service vulnerability

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server...

axlnlp (0.0.1) potentially affected by CVE-2024-8020 via pytorch-lightning (0.7.3)

pytorch-lightning PYPI version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - axlnlp 0.0.1 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

cait (1.1.3), contextualized-ml (>=0.2.5, <=0.2.6) +4 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.9.4)

pytorch-lightning PYPI version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cait 1.1.3 - contextualized-ml =0.2.5, =0.3.0, =0.1.0, =0.2.0 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

bob-bio-face (8.0.0), bob-bio-video (7.0.0) +3 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.8.1)

pytorch-lightning PYPI version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bob-bio-face 8.0.0 - bob-bio-video 7.0.0 - bob-pad-face 5.0.0 - everyvoice 0.1.20230307 - finetuning-scheduler 0.3.1 Source...

hypast (>=0.0.5, <=0.0.7), solo-learn (1.0.2) potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.7)

pytorch-lightning PYPI version 1.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - hypast =0.0.5, =0.0.7 - solo-learn 1.0.2 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

geniverse (>=0.0.1, <=0.0.12.12), hugging-gan-test (>=0.0.1, <=0.2.29) +1 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.3)

pytorch-lightning PYPI version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - geniverse =0.0.1, =0.0.1, =0.2.29 - ratsnlp 0.0.9983 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

packagedquestgenforlambda (>=1.0.0, <=1.0.3) potentially affected by CVE-2024-8020 via pytorch-lightning (0.8.1)

pytorch-lightning PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - packagedquestgenforlambda =1.0.0, =1.0.3 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

autoalbument (0.4.0), deepethogram (>=0.1.0, <=0.1.2) +8 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.1.8)

pytorch-lightning PYPI version 1.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autoalbument 0.4.0 - deepethogram =0.1.0, =1.1.0, =0.2.0, =0.2.0, =0.4.0, =0.6.0 Source cves: CVE-2024-8020 Source advisory:...

ratsnlp (>=0.0.9981, <=1.0.51) potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.4)

pytorch-lightning PYPI version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - ratsnlp =0.0.9981, =1.0.51 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

deepts-forecasting (>=0.1.0, <=0.1.2), eugene-tools (>=0.0.1, <=0.0.6) +6 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.5.10)

pytorch-lightning PYPI version 1.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - deepts-forecasting =0.1.0, =0.0.1, =0.5.0, =1.1.2, =1.0.19, =0.1.0, =1.0.3 Source cves: CVE-2024-8020 Source advisory:...

dataset-format-benchmark (0.0.10) potentially affected by CVE-2024-8020 via pytorch-lightning (1.9.2)

pytorch-lightning PYPI version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - dataset-format-benchmark 0.0.10 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

pytorch-segmentation-models-trainer (0.7.0), ratsnlp (0.0.9993) potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.7)

pytorch-lightning PYPI version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-segmentation-models-trainer 0.7.0 - ratsnlp 0.0.9993 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

locate-model (>=0.0.1, <=0.0.3) potentially affected by CVE-2024-8020 via pytorch-lightning (1.8.3)

pytorch-lightning PYPI version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - locate-model =0.0.1, =0.0.3 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

route-distances (>=1.2.0, <=1.2.4) potentially affected by CVE-2024-8020 via pytorch-lightning (1.8.3.post2)

pytorch-lightning PYPI version 1.8.3.post2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - route-distances =1.2.0, =1.2.4 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...