databalancer (>=0.0.7, <=0.0.8), torchline (>=0.3.0.0a0, <=0.3.0.1) potentially affected by CVE-2021-4118 via pytorch-lightning (0.7.5)

pytorch-lightning PYPI version 0.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - databalancer =0.0.7, =0.3.0.0a0, =0.3.0.1 Source cves: CVE-2021-4118 Source advisory: OSV:PYSEC-2021-874...

axlnlp (0.0.1) potentially affected by CVE-2021-4118 via pytorch-lightning (0.7.3)

pytorch-lightning PYPI version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - axlnlp 0.0.1 Source cves: CVE-2021-4118 Source advisory: OSV:PYSEC-2021-874...

Deserialization of untrusted data

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

formerbox (>=0.1.8, <=0.1.10), npvcc2016 (>=1.0.3, <=1.2.1) +2 more potentially affected by CVE-2021-4118 via pytorch-lightning (0.10.0)

pytorch-lightning PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - formerbox =0.1.8, =1.0.3, =1.2.1 - pytorch-forecasting 0.5.0 - pytorch-pqrnn 0.1.0 Source cves: CVE-2021-4118 Source advisory...

anomalib (>=0.2.2, <=0.2.4), argos-trains (0.1.0) +146 more potentially affected by CVE-2021-4118 via pytorch-lightning (>=1.0.5, <=1.5.10.post0)

pytorch-lightning PYPI version =1.0.5, =0.2.2, =0.5.0rc0, =0.3.2b20220222, =0.3.2b20220222, =0.0.1, =0.0.7, =3.0.0, =0.5.9, =0.0.1, =0.1.1 - bytesep-fancybit 0.0.8 and more Source cves: CVE-2021-4118 Source advisory: OSV:PYSEC-2021-874...

asteroid (>=0.3.1rc0, <=0.3.2), borisml (>=0.0.2, <=0.1.0) +3 more potentially affected by CVE-2021-4118 via pytorch-lightning (0.7.6)

pytorch-lightning PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.3.1rc0, =0.0.2, =0.1.0, =0.3.0.2, =0.3.0.4 Source cves: CVE-2021-4118 Source advisory: OSV:PYSEC-2021-874...

torchline (>=0.1.0, <=0.1.4.2) potentially affected by CVE-2021-4118 via pytorch-lightning (0.5.3.2)

pytorch-lightning PYPI version 0.5.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - torchline =0.1.0, =0.1.4.2 Source cves: CVE-2021-4118 Source advisory: OSV:PYSEC-2021-874...

asteroid (>=0.3.5, <=0.4.0), coreml (>=0.0.10, <=0.0.15) +8 more potentially affected by CVE-2021-4118 via pytorch-lightning (0.9.0)

pytorch-lightning PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.3.5, =0.0.10, =0.0.1, =0.0.2.post1, =1.0.0a4, =0.4.1, =0.2.1, =0.13.6, =0.1.0, =0.1.1 - torch-factorization-models...

benchformer (0.0.1.dev1), nerblackbox (>=0.0.5, <=0.0.10) +1 more potentially affected by CVE-2021-4118 via pytorch-lightning (0.7.1)

pytorch-lightning PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - benchformer 0.0.1.dev1 - nerblackbox =0.0.5, =0.0.10 - nlp-architect 0.5.3 Source cves: CVE-2021-4118 Source advisory:...

PYSEC-2021-874

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

CVE-2021-4118 Deserialization of Untrusted Data in pytorchlightning/pytorch-lightning

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

CVE-2021-4118

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

CVE-2021-4118

CVE-2021-4118 affects pytorch-lightning and is described as a Deserialization of Untrusted Data vulnerability. The CVSS3 data in the records indicates a HIGH impact on confidentiality, integrity, and availability with a LOCAL attack vector, LOW attack complexity, no privileges required, and USER ...

anomalib (>=0.2.2, <=0.2.4), argos-trains (0.1.0) +170 more potentially affected by CVE-2021-4118 via pytorch-lightning (>=0.5.3.2, <=1.5.10.post0)

pytorch-lightning PYPI version =0.5.3.2, =0.2.2, =0.1.1, =0.3.2b20220222, =0.3.2b20220222, =0.0.1, =0.0.7, =3.0.0, =3.3.0 and more Source cves: CVE-2021-4118 Source advisory: MEND:CVE-2021-4118...

PT-2021-23155

Name of the Vulnerable Software and Affected Versions pytorch-lightning affected versions not specified Description The issue concerns the deserialization of untrusted data in pytorch-lightning. There is no information provided about the estimated number of potentially affected devices worldwide ...

Pytorch-Lightning code issues and vulnerabilities

Pytorch-Lightning is an open source lightweight PyTorch wrapper. Used for high-performance Ai research. pytorch-lightning suffers from a code issue vulnerability that stems from the software's tendency to deserialize untrustworthy data, which can be exploited by an attacker to cause code executio...

CVE-2021-4118: Deserialization of Untrusted Data

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

CVE-2021-43811

Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An...

CVE-2021-43811

Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An...

PYSEC-2021-848

Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An...