finetuning-scheduler (0.1.2), gts-engine (>=0.1.1, <=0.1.2) +3 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.6.2)

pytorch-lightning PYPI version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.1.2 - gts-engine =0.1.1, =0.3.3, =0.1.0, =0.1.5 Source cves: CVE-2024-8019 Source advisory:...

GHSA-4CV3-V7PV-RFHF PyTorch Lightning path traversal vulnerability

In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the LightningApp when running on a Windows host. The vulnerability occurs at the /api/v1/uploadfile/ endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to...

formerbox (>=0.1.8, <=0.1.10), npvcc2016 (>=1.0.3, <=1.2.1) +2 more potentially affected by CVE-2024-8019 via pytorch-lightning (0.10.0)

pytorch-lightning PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - formerbox =0.1.8, =1.0.3, =1.2.1 - pytorch-forecasting 0.5.0 - pytorch-pqrnn 0.1.0 Source cves: CVE-2024-8019 Source advisory...

backprop (>=0.0.1, <=0.0.2), kiri (>=0.5.0.dev1, <=0.5.1) +3 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.1.0)

pytorch-lightning PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - backprop =0.0.1, =0.5.0.dev1, =1.0.2, =0.1.1rc3, =0.1.1 - ragcar 0.1.0 Source cves: CVE-2024-8019 Source advisory:...

autoalbument (0.4.0), deepethogram (>=0.1.0, <=0.1.2) +8 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.1.8)

pytorch-lightning PYPI version 1.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autoalbument 0.4.0 - deepethogram =0.1.0, =1.1.0, =0.2.0, =0.2.0, =0.4.0, =0.6.0 Source cves: CVE-2024-8019 Source advisory:...

lightning-flash (>=0.1.0, <=0.2.1) potentially affected by CVE-2024-8019 via pytorch-lightning (1.2.0rc0)

pytorch-lightning PYPI version 1.2.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - lightning-flash =0.1.0, =0.2.1 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

ratsnlp (>=0.0.971, <=0.0.997) potentially affected by CVE-2024-8019 via pytorch-lightning (1.2.3)

pytorch-lightning PYPI version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - ratsnlp =0.0.971, =0.0.997 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

asteroid (>=0.3.1rc0, <=0.3.2), borisml (>=0.0.2, <=0.1.0) +3 more potentially affected by CVE-2024-8019 via pytorch-lightning (0.7.6)

pytorch-lightning PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.3.1rc0, =0.0.2, =0.1.0, =0.3.0.2, =0.3.0.4 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

packagedquestgenforlambda (>=1.0.0, <=1.0.3) potentially affected by CVE-2024-8019 via pytorch-lightning (0.8.1)

pytorch-lightning PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - packagedquestgenforlambda =1.0.0, =1.0.3 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

baal (1.2.1), dpm360-lightsaber (>=0.2.0, <=0.2.5) +7 more potentially affected by CVE-2024-8019 via pytorch-lightning (0.8.5)

pytorch-lightning PYPI version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - baal 1.2.1 - dpm360-lightsaber =0.2.0, =0.1.0, =2.0.0, =0.1.2, =0.1.0, =0.0.3, =0.0.970 Source cves: CVE-2024-8019 Source...

cluster-depp-test (0.0.2), depp (>=0.1.9, <=0.2.3) +2 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.0.5)

pytorch-lightning PYPI version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cluster-depp-test 0.0.2 - depp =0.1.9, =0.0.1, =0.0.3 - pytorch-lightning-help 0.0.1 Source cves: CVE-2024-8019 Source advisor...

dlk (>=0.0.1, <=0.0.4) potentially affected by CVE-2024-8019 via pytorch-lightning (1.5.5)

pytorch-lightning PYPI version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - dlk =0.0.1, =0.0.4 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

deepbio (0.0.1), deepprot (0.12.0) potentially affected by CVE-2024-8019 via pytorch-lightning (1.2.5)

pytorch-lightning PYPI version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - deepbio 0.0.1 - deepprot 0.12.0 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

unscribe (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-8019 via pytorch-lightning (1.2.9)

pytorch-lightning PYPI version 1.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - unscribe =0.0.1, =0.0.2 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

yolort (0.4.0) potentially affected by CVE-2024-8019 via pytorch-lightning (1.3.0rc1)

pytorch-lightning PYPI version 1.3.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - yolort 0.4.0 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

pylaia (>=1.1.0, <=1.1.1rc1), pyrovelocity (0.1.1) +2 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.3.0)

pytorch-lightning PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pylaia =1.1.0, =1.1.1rc1 - pyrovelocity 0.1.1 - ratsnlp 0.0.9984 - ride 0.4.4 Source cves: CVE-2024-8019 Source advisory:...

gradsflow (>=0.0.1b1, <=0.0.3), pytorch-lightning-spells (>=0.0.4, <=0.0.5) potentially affected by CVE-2024-8019 via pytorch-lightning (1.4.0)

pytorch-lightning PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - gradsflow =0.0.1b1, =0.0.4, =0.0.5 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

olorenchemengine (>=0.0.0, <=1.0.3), recsys-slates-dataset (>=0.0.5, <=0.0.6) potentially affected by CVE-2024-8019 via pytorch-lightning (1.4.1)

pytorch-lightning PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - olorenchemengine =0.0.0, =0.0.5, =0.0.6 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

pytorch-segmentation-models-trainer (0.11.0) potentially affected by CVE-2024-8019 via pytorch-lightning (1.4.3)

pytorch-lightning PYPI version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-segmentation-models-trainer 0.11.0 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...

geniverse (>=0.0.1, <=0.0.12.12), hugging-gan-test (>=0.0.1, <=0.2.29) +1 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.3.3)

pytorch-lightning PYPI version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - geniverse =0.0.1, =0.0.1, =0.2.29 - ratsnlp 0.0.9983 Source cves: CVE-2024-8019 Source advisory: OSV:GHSA-4CV3-V7PV-RFHF...