Pytorch-Lightning Code Injection Vulnerability

Pytorch-Lightning is an open source lightweight PyTorch wrapper for high-performance Ai research. Used for high-performance Ai research, Pytorch-Lightning is vulnerable to a code injection vulnerability that could be exploited to inject code into the GitHub repository...

databalancer (>=0.0.7, <=0.0.8), torchline (>=0.3.0.0a0, <=0.3.0.1) potentially affected by CVE-2022-0845 via pytorch-lightning (0.7.5)

pytorch-lightning PYPI version 0.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - databalancer =0.0.7, =0.3.0.0a0, =0.3.0.1 Source cves: CVE-2022-0845 Source advisory: OSV:GHSA-R5QJ-CVF9-P85H...

packagedquestgenforlambda (>=1.0.0, <=1.0.3) potentially affected by CVE-2022-0845 via pytorch-lightning (0.8.1)

pytorch-lightning PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - packagedquestgenforlambda =1.0.0, =1.0.3 Source cves: CVE-2022-0845 Source advisory: OSV:GHSA-R5QJ-CVF9-P85H...

anomalib (>=0.2.2, <=0.2.4), argos-trains (0.1.0) +146 more potentially affected by CVE-2022-0845 via pytorch-lightning (>=1.0.5, <=1.5.10.post0)

pytorch-lightning PYPI version =1.0.5, =0.2.2, =0.5.0rc0, =0.3.2b20220222, =0.3.2b20220222, =0.0.1, =0.0.7, =3.0.0, =0.5.9, =0.0.1, =0.1.1 - bytesep-fancybit 0.0.8 and more Source cves: CVE-2022-0845 Source advisory: OSV:GHSA-R5QJ-CVF9-P85H...

benchformer (0.0.1.dev1), nerblackbox (>=0.0.5, <=0.0.10) +1 more potentially affected by CVE-2022-0845 via pytorch-lightning (0.7.1)

pytorch-lightning PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - benchformer 0.0.1.dev1 - nerblackbox =0.0.5, =0.0.10 - nlp-architect 0.5.3 Source cves: CVE-2022-0845 Source advisory:...

baal (1.2.1), dpm360-lightsaber (>=0.2.0, <=0.2.5) +7 more potentially affected by CVE-2022-0845 via pytorch-lightning (0.8.5)

pytorch-lightning PYPI version 0.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - baal 1.2.1 - dpm360-lightsaber =0.2.0, =0.1.0, =2.0.0, =0.1.2, =0.1.0, =0.0.3, =0.0.970 Source cves: CVE-2022-0845 Source...

asteroid (>=0.3.5, <=0.4.0), coreml (>=0.0.10, <=0.0.15) +8 more potentially affected by CVE-2022-0845 via pytorch-lightning (0.9.0)

pytorch-lightning PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.3.5, =0.0.10, =0.0.1, =0.0.2.post1, =1.0.0a4, =0.4.1, =0.2.1, =0.13.6, =0.1.0, =0.1.1 - torch-factorization-models...

anomalib (>=0.2.2, <=0.2.4), argos-trains (0.1.0) +146 more potentially affected by CVE-2022-0845 via pytorch-lightning (>=1.0.5, <=1.5.10.post0)

pytorch-lightning PYPI version =1.0.5, =0.2.2, =0.5.0rc0, =0.3.2b20220222, =0.3.2b20220222, =0.0.1, =0.0.7, =3.0.0, =0.5.9, =0.0.1, =0.1.1 - bytesep-fancybit 0.0.8 and more Source cves: CVE-2022-0845 Source advisory: GHSA-R5QJ-CVF9-P85H...

asteroid (>=0.1.1, <=0.2.0), torchline (>=0.2.0, <=0.2.4.3) potentially affected by CVE-2022-0845 via pytorch-lightning (0.6.0)

pytorch-lightning PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.1.1, =0.2.0, =0.2.4.3 Source cves: CVE-2022-0845 Source advisory: OSV:GHSA-R5QJ-CVF9-P85H...

Code Injection in PyTorch Lightning

PyTorch Lightning version 1.5.10 and prior is vulnerable to code injection. An attacker could execute commands on the target OS running the operating system by setting the PLTRAINERGPUS when using the Trainer module. A patch is included in the 1.6.0 release...

cogexquestgen (>=1.0.0, <=1.0.3), deepmorpheus (>=0.2.1, <=0.2.3) potentially affected by CVE-2022-0845 via pytorch-lightning (0.8.4)

pytorch-lightning PYPI version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cogexquestgen =1.0.0, =0.2.1, =0.2.3 Source cves: CVE-2022-0845 Source advisory: OSV:GHSA-R5QJ-CVF9-P85H...

formerbox (>=0.1.8, <=0.1.10), npvcc2016 (>=1.0.3, <=1.2.1) +2 more potentially affected by CVE-2022-0845 via pytorch-lightning (0.10.0)

pytorch-lightning PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - formerbox =0.1.8, =1.0.3, =1.2.1 - pytorch-forecasting 0.5.0 - pytorch-pqrnn 0.1.0 Source cves: CVE-2022-0845 Source advisory...

torchline (>=0.1.0, <=0.1.4.2) potentially affected by CVE-2022-0845 via pytorch-lightning (0.5.3.2)

pytorch-lightning PYPI version 0.5.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - torchline =0.1.0, =0.1.4.2 Source cves: CVE-2022-0845 Source advisory: OSV:GHSA-R5QJ-CVF9-P85H...

axlnlp (0.0.1) potentially affected by CVE-2022-0845 via pytorch-lightning (0.7.3)

pytorch-lightning PYPI version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - axlnlp 0.0.1 Source cves: CVE-2022-0845 Source advisory: OSV:GHSA-R5QJ-CVF9-P85H...

asteroid (>=0.3.1rc0, <=0.3.2), borisml (>=0.0.2, <=0.1.0) +3 more potentially affected by CVE-2022-0845 via pytorch-lightning (0.7.6)

pytorch-lightning PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.3.1rc0, =0.0.2, =0.1.0, =0.3.0.2, =0.3.0.4 Source cves: CVE-2022-0845 Source advisory: OSV:GHSA-R5QJ-CVF9-P85H...

GHSA-R5QJ-CVF9-P85H Code Injection in PyTorch Lightning

PyTorch Lightning version 1.5.10 and prior is vulnerable to code injection. An attacker could execute commands on the target OS running the operating system by setting the PLTRAINERGPUS when using the Trainer module. A patch is included in the 1.6.0 release...

CVE-2022-0845

Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0...

CVE-2022-0845

Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0...

PYSEC-2022-181

Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0...

packagedquestgenforlambda (>=1.0.0, <=1.0.3) potentially affected by CVE-2022-0845 via pytorch-lightning (0.8.1)

pytorch-lightning PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - packagedquestgenforlambda =1.0.0, =1.0.3 Source cves: CVE-2022-0845 Source advisory: OSV:PYSEC-2022-181...