classy-core (0.1.0a0), iqradre (>=0.1.5, <=0.2.1) +2 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.5)

pytorch-lightning PYPI version 1.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - classy-core 0.1.0a0 - iqradre =0.1.5, =1.0.0, =1.1.1 - torchility 0.2.10 Source cves: CVE-2024-8020 Source advisory:...

hypast (>=0.0.5, <=0.0.7), solo-learn (1.0.2) potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.7)

pytorch-lightning PYPI version 1.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - hypast =0.0.5, =0.0.7 - solo-learn 1.0.2 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

paoding (0.1.1), pytorch-segmentation-models-trainer (0.12.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.4.8)

pytorch-lightning PYPI version 1.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - paoding 0.1.1 - pytorch-segmentation-models-trainer 0.12.0 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

yolort (0.4.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.0rc1)

pytorch-lightning PYPI version 1.3.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - yolort 0.4.0 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

geniverse (>=0.0.1, <=0.0.12.12), hugging-gan-test (>=0.0.1, <=0.2.29) +1 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.3)

pytorch-lightning PYPI version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - geniverse =0.0.1, =0.0.1, =0.2.29 - ratsnlp 0.0.9983 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

ratsnlp (>=0.0.9981, <=1.0.51) potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.4)

pytorch-lightning PYPI version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - ratsnlp =0.0.9981, =1.0.51 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

moai-mdk (>=0.1.1a1, <=0.1.5a34), openstf (2.6.3) potentially affected by CVE-2024-8020 via pytorch-lightning (1.5.1)

pytorch-lightning PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - moai-mdk =0.1.1a1, =0.1.5a34 - openstf 2.6.3 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

pytorch-segmentation-models-trainer (0.15.0) potentially affected by CVE-2024-8020 via pytorch-lightning (1.5.2)

pytorch-lightning PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-segmentation-models-trainer 0.15.0 Source cves: CVE-2024-8020 Source advisory: OSV:GHSA-98FP-7V67-4V3Q...

clarinpl-embeddings (>=0.0.1rc158803945536, <=0.0.1rc158956732038), cluster-depp-test (>=0.0.3, <=0.0.21) +5 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.5.4)

pytorch-lightning PYPI version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - clarinpl-embeddings =0.0.1rc158803945536, =0.0.3, =0.3.0, =0.3.0, =0.1.0, =0.0.0.77, =0.0.0.79 -...

GHSA-4VMG-RW8F-92F9 Withdrawn Advisory: PyTorch deserialization vulnerability

Withdrawn Advisory This advisory has been withdrawn because it describes known functionality of PyTorch. This link is maintained to preserve external references. Original Description A deserialization vulnerability exists in the Pytorch RPC framework torch.distributed.rpc in pytorch/pytorch...

deep-learning-plus (>=0.0.5, <=0.0.7), torchfl (>=0.1.1, <=0.1.5) potentially affected by CVE-2024-8019 via pytorch-lightning (1.5.7)

pytorch-lightning PYPI version 1.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - deep-learning-plus =0.0.5, =0.1.1, =0.1.5 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

classy-core (>=0.2.1.dev20220303, <=0.2.1), open-metric-learning (>=0.3.0, <=0.3.6) potentially affected by CVE-2024-8019 via pytorch-lightning (1.5.9)

pytorch-lightning PYPI version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - classy-core =0.2.1.dev20220303, =0.3.0, =0.3.6 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

cait (1.1.3), contextualized-ml (>=0.2.5, <=0.2.6) +4 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.9.4)

pytorch-lightning PYPI version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cait 1.1.3 - contextualized-ml =0.2.5, =0.3.0, =0.1.0, =0.2.0 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-R...

locate-model (>=0.0.1, <=0.0.3) potentially affected by CVE-2024-8019 via pytorch-lightning (1.8.3)

pytorch-lightning PYPI version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - locate-model =0.0.1, =0.0.3 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

bob-bio-face (8.0.0), bob-bio-video (7.0.0) +3 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.8.1)

pytorch-lightning PYPI version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bob-bio-face 8.0.0 - bob-bio-video 7.0.0 - bob-pad-face 5.0.0 - everyvoice 0.1.20230307 - finetuning-scheduler 0.3.1 Source...

acids-msprior (>=1.0.1, <=1.1.3), acids-rave (>=2.1.16, <=2.3.1) +9 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.9.0)

pytorch-lightning PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - acids-msprior =1.0.1, =2.1.16, =0.0.2, =0.0.1, =0.2.6, =0.4.9, =0.4.0, =0.7.5 - swyft 0.4.2 - tencent-wedata-auto-ml 0.2.39...

finetuning-scheduler (0.2.1), nlhappy (2022.9.14) +1 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.7.1)

pytorch-lightning PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.2.1 - nlhappy 2022.9.14 - pytorch-segmentation-models-trainer 0.17.0 Source cves: CVE-2024-8019 Source...

dimweb-persona-bot (0.0.6), finetuning-scheduler (0.2.2) +1 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.7.6)

pytorch-lightning PYPI version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - dimweb-persona-bot 0.0.6 - finetuning-scheduler 0.2.2 - gts-engine 0.1.3 Source cves: CVE-2024-8019 Source advisory:...

harmonai-tools (0.0.5), neuralprophet (>=0.5.0rc1, <=0.5.1) +1 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.7.4)

pytorch-lightning PYPI version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - harmonai-tools 0.0.5 - neuralprophet =0.5.0rc1, =1.0.2, =1.0.4 Source cves: CVE-2024-8019 Source advisory:...

mofreinforce (>=0.0.2, <=1.0.1) potentially affected by CVE-2024-8019 via pytorch-lightning (1.8.0)

pytorch-lightning PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - mofreinforce =0.0.2, =1.0.1 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...