chatmof (>=0.2.0, <=0.2.2), finetuning-scheduler (0.2.0) +2 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.7.0)

pytorch-lightning PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - chatmof =0.2.0, =1.1.2, =0.3.7, =0.3.11 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

autogluon (>=0.4.1b20220511, <=0.5.3b20221005), autogluon-multimodal (>=0.4.3b20220616, <=0.5.3b20221005) +38 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.6.5.post0)

pytorch-lightning PYPI version 1.6.5.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon =0.4.1b20220511, =0.4.3b20220616, =0.4.1b20220511, =1.0.0, =0.1.3, =0.5.33, =0.1.5, =0.6.0, =0.6.1, =0.47.0,...

ablation (0.1.0), deepethogram (>=0.3.0, <=0.5.0) +7 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.6.5)

pytorch-lightning PYPI version 1.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - ablation 0.1.0 - deepethogram =0.3.0, =0.0.15, =1.4.0, =1.0.0, =0.1.0, =0.1.2 - run-crom 1.0.0 Source cves: CVE-2024-8020 Sour...

bigdl-chronos (2.0.0), bigdl-chronos-spark2 (2.0.0) +10 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.6.4)

pytorch-lightning PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bigdl-chronos 2.0.0 - bigdl-chronos-spark2 2.0.0 - bigdl-chronos-spark3 2.0.0 - dicee =0.0.2, =0.1.5, =0.0.2, =0.0.3, =1.0.0,...

cookiellmtest (>=1.0.1, <=1.0.6), cookienlp (>=1.0.0, <=1.0.2) +3 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.6.1)

pytorch-lightning PYPI version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cookiellmtest =1.0.1, =1.0.0, =1.0.52, =1.0.53 - smallteacher 0.0.1 Source cves: CVE-2024-8020 Source advisory:...

debias-m (0.0.1), dlk (>=0.0.11, <=0.0.14) +4 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.6.0)

pytorch-lightning PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - debias-m 0.0.1 - dlk =0.0.11, =1.1.0, =1.1.1 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

autogluon (>=0.3.2b20220222, <=0.4.3b20220617), autogluon-text (>=0.3.2b20220222, <=0.4.1b20220510) +28 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.5.10.post0)

pytorch-lightning PYPI version 1.5.10.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon =0.3.2b20220222, =0.3.2b20220222, =0.3.0.dev20220423, =0.1.0, =0.0.1, =0.1.11, =0.0.2, =0.5.0, =1.0.0, =0.0.1...

deepts-forecasting (>=0.1.0, <=0.1.2), eugene-tools (>=0.0.1, <=0.0.6) +6 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.5.10)

pytorch-lightning PYPI version 1.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - deepts-forecasting =0.1.0, =0.0.1, =0.5.0, =1.1.2, =1.0.19, =0.1.0, =1.0.3 Source cves: CVE-2024-8020 Source advisory:...

classy-core (>=0.2.1.dev20220303, <=0.2.1), open-metric-learning (>=0.3.0, <=0.3.6) potentially affected by CVE-2024-8020 via pytorch-lightning (1.5.9)

pytorch-lightning PYPI version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - classy-core =0.2.1.dev20220303, =0.3.0, =0.3.6 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

GHSA-98FP-7V67-4V3Q PyTorch Lightning denial of service vulnerability

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server...

bio-transformers (>=0.0.7, <=0.1.2), biome-text (>=3.0.0, <=3.2.1) +21 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.8)

pytorch-lightning PYPI version 1.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bio-transformers =0.0.7, =3.0.0, =0.5.9, =0.1.0, =0.0.22, =0.0.11, =0.7.1, =0.4.5, =0.4.6 and more Source cves: CVE-2024-8020...

nemo-toolkit (1.1.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.7.post0)

pytorch-lightning PYPI version 1.3.7.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - nemo-toolkit 1.1.0 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

pytorch-segmentation-models-trainer (0.7.0), ratsnlp (0.0.9993) potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.7)

pytorch-lightning PYPI version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-segmentation-models-trainer 0.7.0 - ratsnlp 0.0.9993 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V...

github-acc-test (>=0.0.1, <=0.3.1), libmultilabel (>=0.0.1, <=0.1.4) +3 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.5)

pytorch-lightning PYPI version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - github-acc-test =0.0.1, =0.0.1, =0.0.1rc1, =0.1.0, =1.0.0rc1, =1.0.1 Source cves: CVE-2024-8020 Source advisory:...

ratsnlp (>=0.0.9981, <=1.0.51) potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.4)

pytorch-lightning PYPI version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - ratsnlp =0.0.9981, =1.0.51 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

gradattack (>=0.1.1, <=0.1.2), openue (>=0.2.3, <=0.2.5) potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.1)

pytorch-lightning PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - gradattack =0.1.1, =0.2.3, =0.2.5 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

yolort (0.4.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.0rc1)

pytorch-lightning PYPI version 1.3.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - yolort 0.4.0 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

asteroid (>=0.5.0rc0, <=0.5.0), backprop (>=0.0.3, <=0.1.3) +12 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.2.10)

pytorch-lightning PYPI version 1.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.5.0rc0, =0.0.3, =0.3.0b1, =1.0.0, =0.3.1.0, =2.0.0, =1.0.4, =0.8.1, =1.0.0, =0.1.0, =0.2.0 Source cves:...

unscribe (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-8020 via pytorch-lightning (1.2.9)

pytorch-lightning PYPI version 1.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - unscribe =0.0.1, =0.0.2 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

deepbio (0.0.1), deepprot (0.12.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.2.5)

pytorch-lightning PYPI version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - deepbio 0.0.1 - deepprot 0.12.0 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...