997 matches found
asteroid (>=0.3.1rc0, <=0.3.2), borisml (>=0.0.2, <=0.1.0) +3 more potentially affected by CVE-2021-4118 via pytorch-lightning (0.7.6)
pytorch-lightning PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.3.1rc0, =0.0.2, =0.1.0, =0.3.0.2, =0.3.0.4 Source cves: CVE-2021-4118 Source advisory: OSV:PYSEC-2021-874...
packagedquestgenforlambda (>=1.0.0, <=1.0.3) potentially affected by CVE-2021-4118 via pytorch-lightning (0.8.1)
pytorch-lightning PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - packagedquestgenforlambda =1.0.0, =1.0.3 Source cves: CVE-2021-4118 Source advisory: OSV:PYSEC-2021-874...
baal (1.2.1), dpm360-lightsaber (>=0.2.0, <=0.2.5) +7 more potentially affected by CVE-2021-4118 via pytorch-lightning (0.8.5)
pytorch-lightning PYPI version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - baal 1.2.1 - dpm360-lightsaber =0.2.0, =0.1.0, =2.0.0, =0.1.2, =0.1.0, =0.0.3, =0.0.970 Source cves: CVE-2021-4118 Source...
PYSEC-2021-874
pytorch-lightning is vulnerable to Deserialization of Untrusted Data...
PYSEC-2021-874
pytorch-lightning is vulnerable to Deserialization of Untrusted Data...
formerbox (>=0.1.8, <=0.1.10), npvcc2016 (>=1.0.3, <=1.2.1) +2 more potentially affected by CVE-2021-4118 via pytorch-lightning (0.10.0)
pytorch-lightning PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - formerbox =0.1.8, =1.0.3, =1.2.1 - pytorch-forecasting 0.5.0 - pytorch-pqrnn 0.1.0 Source cves: CVE-2021-4118 Source advisory...
anomalib (>=0.2.2, <=0.2.4), argos-trains (0.1.0) +146 more potentially affected by CVE-2021-4118 via pytorch-lightning (>=1.0.5, <=1.5.10.post0)
pytorch-lightning PYPI version =1.0.5, =0.2.2, =0.5.0rc0, =0.3.2b20220222, =0.3.2b20220222, =0.0.1, =0.0.7, =3.0.0, =0.5.9, =0.0.1, =0.1.1 - bytesep-fancybit 0.0.8 and more Source cves: CVE-2021-4118 Source advisory: OSV:PYSEC-2021-874...
axlnlp (0.0.1) potentially affected by CVE-2021-4118 via pytorch-lightning (0.7.3)
pytorch-lightning PYPI version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - axlnlp 0.0.1 Source cves: CVE-2021-4118 Source advisory: OSV:PYSEC-2021-874...
torchline (>=0.1.0, <=0.1.4.2) potentially affected by CVE-2021-4118 via pytorch-lightning (0.5.3.2)
pytorch-lightning PYPI version 0.5.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - torchline =0.1.0, =0.1.4.2 Source cves: CVE-2021-4118 Source advisory: OSV:PYSEC-2021-874...
benchformer (0.0.1.dev1), nerblackbox (>=0.0.5, <=0.0.10) +1 more potentially affected by CVE-2021-4118 via pytorch-lightning (0.7.1)
pytorch-lightning PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - benchformer 0.0.1.dev1 - nerblackbox =0.0.5, =0.0.10 - nlp-architect 0.5.3 Source cves: CVE-2021-4118 Source advisory:...
CVE-2021-4118 Deserialization of Untrusted Data in pytorchlightning/pytorch-lightning
pytorch-lightning is vulnerable to Deserialization of Untrusted Data...
CVE-2021-4118
pytorch-lightning is vulnerable to Deserialization of Untrusted Data...
anomalib (>=0.2.2, <=0.2.4), argos-trains (0.1.0) +170 more potentially affected by CVE-2021-4118 via pytorch-lightning (>=0.5.3.2, <=1.5.10.post0)
pytorch-lightning PYPI version =0.5.3.2, =0.2.2, =0.1.1, =0.3.2b20220222, =0.3.2b20220222, =0.0.1, =0.0.7, =3.0.0, =3.3.0 and more Source cves: CVE-2021-4118 Source advisory: MEND:CVE-2021-4118...
CVE-2021-4118
CVE-2021-4118 affects pytorch-lightning and is described as a Deserialization of Untrusted Data vulnerability. The CVSS3 data in the records indicates a HIGH impact on confidentiality, integrity, and availability with a LOCAL attack vector, LOW attack complexity, no privileges required, and USER ...
Pytorch-Lightning code issues and vulnerabilities
Pytorch-Lightning is an open source lightweight PyTorch wrapper. Used for high-performance Ai research. pytorch-lightning suffers from a code issue vulnerability that stems from the software's tendency to deserialize untrustworthy data, which can be exploited by an attacker to cause code executio...
PT-2021-23155
Name of the Vulnerable Software and Affected Versions pytorch-lightning affected versions not specified Description The issue concerns the deserialization of untrusted data in pytorch-lightning. There is no information provided about the estimated number of potentially affected devices worldwide ...
