intrepppid (0.1.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.9.1)

pytorch-lightning PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - intrepppid 0.1.0 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

dataset-format-benchmark (0.0.10) potentially affected by CVE-2024-8020 via pytorch-lightning (1.9.2)

pytorch-lightning PYPI version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - dataset-format-benchmark 0.0.10 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

dataset-format-benchmark (>=0.0.11, <=0.0.12), hybrid-graph (>=0.2.0, <=0.61.0) +2 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.9.3)

pytorch-lightning PYPI version 1.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - dataset-format-benchmark =0.0.11, =0.2.0, =0.1.0, =0.1.1 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

cait (1.1.3), contextualized-ml (>=0.2.5, <=0.2.6) +4 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.9.4)

pytorch-lightning PYPI version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cait 1.1.3 - contextualized-ml =0.2.5, =0.3.0, =0.1.0, =0.2.0 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4...

anomalib (>=0.4.0rc2, <=1.0.0.dev0), ast-slizovskaia (>=0.1.1, <=0.1.4) +150 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.9.5)

pytorch-lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - anomalib =0.4.0rc2, =0.1.1, =0.1.0, =0.3.2b20220218, =0.6.3b20230121, =0.6.3b20230210, =0.5.62, =0.1.3, =3.3.0, =0.0.1, =0.1.0...

adversarial-insight-ml (0.1.0), aihandler (>=1.8.15, <=1.8.20) +99 more potentially affected by CVE-2024-8020 via pytorch-lightning (>=2.0.0rc0, <=2.3.0)

pytorch-lightning PYPI version =2.0.0rc0, =1.8.15, =1.8.17, =1.8.14, =0.8.3b20230817, =0.8.3b20230802, =0.1.1, =0.1.0, =0.9.0, =0.0.15, =0.3.0, =0.4.5 - chatairunner 1.0.10 and more Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

adversarial-insight-ml (0.1.0), aihandler (>=1.8.15, <=1.8.20) +99 more potentially affected by CVE-2024-8020 via pytorch-lightning (>=2.0.0rc0, <=2.3.0)

pytorch-lightning PYPI version =2.0.0rc0, =1.8.15, =1.8.17, =1.8.14, =0.8.3b20230817, =0.8.3b20230802, =0.1.1, =0.1.0, =0.9.0, =0.0.15, =0.3.0, =0.4.5 - chatairunner 1.0.10 and more Source cves: CVE-2024-8020 Source advisory: GHSA-98FP-7V67-4V3Q...

admetica (>=1.3.0, <=1.4.1), adversarial-insight-ml (0.1.0) +135 more potentially affected by CVE-2024-8020 via pytorch-lightning (>=2.0.0rc0, <=2.3.3)

pytorch-lightning PYPI version =2.0.0rc0, =1.3.0, =1.8.15, =1.8.17, =1.8.14, =1.0.0rc1, =0.8.3b20230817, =0.8.3b20230802, =0.1.1, =0.1.0, =0.9.0, =0.9.3 and more Source cves: CVE-2024-8020 Source advisory: SNYK:PYTHON-PYTORCHLIGHTNING-9510929...

finetuning-scheduler (0.1.2), gts-engine (>=0.1.1, <=0.1.2) +3 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.6.2)

pytorch-lightning PYPI version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.1.2 - gts-engine =0.1.1, =0.3.3, =0.1.0, =0.1.5 Source cves: CVE-2024-8020 Source advisory:...

lightning-flash (>=0.1.0, <=0.2.1) potentially affected by CVE-2024-8020 via pytorch-lightning (1.2.0rc0)

pytorch-lightning PYPI version 1.2.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - lightning-flash =0.1.0, =0.2.1 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

pytorch-segmentation-models-trainer (0.7.0), ratsnlp (0.0.9993) potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.7)

pytorch-lightning PYPI version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-segmentation-models-trainer 0.7.0 - ratsnlp 0.0.9993 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V...

pytorch-segmentation-models-trainer (0.11.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.3)

pytorch-lightning PYPI version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-segmentation-models-trainer 0.11.0 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

paoding (0.1.1), pytorch-segmentation-models-trainer (0.12.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.8)

pytorch-lightning PYPI version 1.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - paoding 0.1.1 - pytorch-segmentation-models-trainer 0.12.0 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

eargait (3.0.0), pytorch-segmentation-models-trainer (>=0.16.0, <=0.16.1) potentially affected by CVE-2024-8020 via pytorch-lightning (1.5.3)

pytorch-lightning PYPI version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - eargait 3.0.0 - pytorch-segmentation-models-trainer =0.16.0, =0.16.1 Source cves: CVE-2024-8020 Source advisory:...

pytorch-segmentation-models-trainer (0.15.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.5.2)

pytorch-lightning PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-segmentation-models-trainer 0.15.0 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

PyTorch Lightning denial of service vulnerability

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server...

GHSA-4CV3-V7PV-RFHF PyTorch Lightning path traversal vulnerability

In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the LightningApp when running on a Windows host. The vulnerability occurs at the /api/v1/uploadfile/ endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to...

GHSA-4VMG-RW8F-92F9 Withdrawn Advisory: PyTorch deserialization vulnerability

Withdrawn Advisory This advisory has been withdrawn because it describes known functionality of PyTorch. This link is maintained to preserve external references. Original Description A deserialization vulnerability exists in the Pytorch RPC framework torch.distributed.rpc in pytorch/pytorch...

torchline (>=0.1.0, <=0.1.4.2) potentially affected by CVE-2024-8019 via pytorch-lightning (0.5.3.2)

pytorch-lightning PYPI version 0.5.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - torchline =0.1.0, =0.1.4.2 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

asteroid (>=0.1.1, <=0.2.0), torchline (>=0.2.0, <=0.2.4.3) potentially affected by CVE-2024-8019 via pytorch-lightning (0.6.0)

pytorch-lightning PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.1.1, =0.2.0, =0.2.4.3 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...