cluster-depp-test (0.0.2), depp (>=0.1.9, <=0.2.3) +2 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.0.5)

pytorch-lightning PYPI version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cluster-depp-test 0.0.2 - depp =0.1.9, =0.0.1, =0.0.3 - pytorch-lightning-help 0.0.1 Source cves: CVE-2024-8019 Source advisor...

packagedquestgenforlambda (>=1.0.0, <=1.0.3) potentially affected by CVE-2024-8019 via pytorch-lightning (0.8.1)

pytorch-lightning PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - packagedquestgenforlambda =1.0.0, =1.0.3 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

databalancer (>=0.0.7, <=0.0.8), torchline (>=0.3.0.0a0, <=0.3.0.1) potentially affected by CVE-2024-8019 via pytorch-lightning (0.7.5)

pytorch-lightning PYPI version 0.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - databalancer =0.0.7, =0.3.0.0a0, =0.3.0.1 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

gradattack (>=0.1.1, <=0.1.2), openue (>=0.2.3, <=0.2.5) potentially affected by CVE-2024-8019 via pytorch-lightning (1.3.1)

pytorch-lightning PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - gradattack =0.1.1, =0.2.3, =0.2.5 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

asteroid (>=0.5.0rc0, <=0.5.0), backprop (>=0.0.3, <=0.1.3) +12 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.2.10)

pytorch-lightning PYPI version 1.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.5.0rc0, =0.0.3, =0.3.0b1, =1.0.0, =0.3.1.0, =2.0.0, =1.0.4, =0.8.1, =1.0.0, =0.1.0, =0.2.0 Source cves:...

unscribe (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-8019 via pytorch-lightning (1.2.9)

pytorch-lightning PYPI version 1.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - unscribe =0.0.1, =0.0.2 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

disent (>=0.0.1.dev12, <=0.0.1.dev14), neureca (0.0.1) potentially affected by CVE-2024-8019 via pytorch-lightning (1.2.7)

pytorch-lightning PYPI version 1.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - disent =0.0.1.dev12, =0.0.1.dev14 - neureca 0.0.1 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

quickvision (>=0.2.0rc1, <=0.2.1) potentially affected by CVE-2024-8019 via pytorch-lightning (1.2.6)

pytorch-lightning PYPI version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - quickvision =0.2.0rc1, =0.2.1 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

deepbio (0.0.1), deepprot (0.12.0) potentially affected by CVE-2024-8019 via pytorch-lightning (1.2.5)

pytorch-lightning PYPI version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - deepbio 0.0.1 - deepprot 0.12.0 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

mimikit (>=0.2.3, <=0.2.6) potentially affected by CVE-2024-8019 via pytorch-lightning (1.2.4)

pytorch-lightning PYPI version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - mimikit =0.2.3, =0.2.6 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

autoalbument (0.4.0), deepethogram (>=0.1.0, <=0.1.2) +8 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.1.8)

pytorch-lightning PYPI version 1.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autoalbument 0.4.0 - deepethogram =0.1.0, =1.1.0, =0.2.0, =0.2.0, =0.4.0, =0.6.0 Source cves: CVE-2024-8019 Source advisory:...

code2seq (>=0.0.0, <=0.0.4), disent (>=0.0.1.dev1, <=0.0.1.dev11) +3 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.1.7)

pytorch-lightning PYPI version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - code2seq =0.0.0, =0.0.1.dev1, =0.3.0.0, =0.0.0.4, =0.0.0.8 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

nemo-toolkit (1.0.0rc1) potentially affected by CVE-2024-8019 via pytorch-lightning (1.1.5)

pytorch-lightning PYPI version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - nemo-toolkit 1.0.0rc1 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

pytorch-quantum (>=0.1.0.dev1, <=0.1.0.dev3) potentially affected by CVE-2024-8019 via pytorch-lightning (1.1.1)

pytorch-lightning PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-quantum =0.1.0.dev1, =0.1.0.dev3 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

Arbitrary File Upload

Overview pytorch-lightning is a lightweight PyTorch wrapper for ML researchers. Scale your models. Write less boilerplate. Affected versions of this package are vulnerable to Arbitrary File Upload via the LightningApp when running on a Windows host at the /api/v1/uploadfile/ endpoint. An attacker...

bytesep (>=0.0.1, <=0.1.1), bytesep-fancybit (0.0.8) +2 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.2.1)

pytorch-lightning PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bytesep =0.0.1, =0.1.0, =0.0.0, =0.0.2 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

simple-leftrefill-inpainting (0.0.1), tldream (>=0.1.0, <=0.4.1) potentially affected by CVE-2024-8019 via pytorch-lightning (1.5.0)

pytorch-lightning PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - simple-leftrefill-inpainting 0.0.1 - tldream =0.1.0, =0.4.1 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFH...

asteroid (>=0.5.2rc0, <=0.5.3), biome-text (3.3.0) +20 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.4.9)

pytorch-lightning PYPI version 1.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.5.2rc0, =0.1.0.dev20211019, =1.0.0, =0.1.0, =0.0.1, =1.0.0, =0.0.0, =0.0.3, =3.0.0, =0.12.1, =0.14.2 and more Sour...

paoding (0.1.1), pytorch-segmentation-models-trainer (0.12.0) potentially affected by CVE-2024-8019 via pytorch-lightning (1.4.8)

pytorch-lightning PYPI version 1.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - paoding 0.1.1 - pytorch-segmentation-models-trainer 0.12.0 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

hypast (>=0.0.5, <=0.0.7), solo-learn (1.0.2) potentially affected by CVE-2024-8019 via pytorch-lightning (1.4.7)

pytorch-lightning PYPI version 1.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - hypast =0.0.5, =0.0.7 - solo-learn 1.0.2 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...