CVE-2024-5452

CVE-2024-5452 01. Overview of RCE and pytorch-lightning 1 Overview of RCE and pytorch-lightning RCE Remote Code Execution is a vulnerability that allows an attacker to execute arbitrary code remotely within a system or application, and is classified as CWE-94: Improper Control of Generation of...

PYSEC-2026-3974 Remote code execution in pytorch lightning

A remote code execution RCE vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the deepdiff library. The library uses deepdiff.Delta objects to modify application state base...

PT-2026-89724

A remote code execution RCE vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the deepdiff library. The library uses deepdiff.Delta objects to modify application state base...

CLSA-2026-1781139163 TuxCare security update for deepdiff (1 CVE)

TuxCare rebuilt deepdiff to address 1 CVE. Fixed in 6.2.3.post2+tuxcare...

CLSA-2025-1757981510 TuxCare security update for deepdiff (1 CVE)

TuxCare rebuilt deepdiff to address 1 CVE. Fixed in 6.2.3.post1+tuxcare...

PT-2026-73544

TuxCare rebuilt deepdiff to address 1 CVE. Fixed in 6.2.3.post1+tuxcare...

PT-2026-75012

TuxCare rebuilt deepdiff to address 1 CVE. Fixed in 6.2.3.post2+tuxcare...

aana (>=0.2.1, <=0.2.2), acdc-aws-etl-pipeline (>=0.1.7, <=0.5.9) +485 more potentially affected by CVE-2026-33155 via deepdiff (>=5.0.1, <=8.6.1)

deepdiff PYPI version =5.0.1, =0.2.1, =0.1.7, =3.0.0b853, =0.0.1, =0.1.0, =1.8.15, =1.8.17, =0.112.0, =1.8.14, =1.0.0, =2.8.5, =2.9.958 and more Source cves: CVE-2026-33155 Source advisory: OSV:PYSEC-2026-2445...

PYSEC-2026-2445 DeepDiff has Memory Exhaustion DoS through SAFE_TO_IMPORT

Summary The pickle unpickler RestrictedUnpickler validates which classes can be loaded but does not limit their constructor arguments. A few of the types in SAFETOIMPORT have constructors that allocate memory proportional to their input builtins.bytes, builtins.list, builtins.range. A 40-byte...

DeepDiff has Memory Exhaustion DoS through SAFE_TO_IMPORT

SummaryThe pickle unpickler RestrictedUnpickler validates which classes can be loaded but does not limit their constructor arguments. A few of the types in SAFETOIMPORT have constructors that allocate memory proportional to their input builtins.bytes, builtins.list, builtins.range. A 40-byte pick...

Remote code execution in pytorch lightning

A remote code execution RCE vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the deepdiff library. The library uses deepdiff.Delta objects to modify application state base...

PYSEC-2026-385 Remote code execution in pytorch lightning

A remote code execution RCE vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the deepdiff library. The library uses deepdiff.Delta objects to modify application state base...

aana (>=0.2.1, <=0.2.2), acdc-aws-etl-pipeline (>=0.1.7, <=0.5.9) +477 more potentially affected by CVE-2025-58367 via deepdiff (>=5.0.1, <=8.6.0)

deepdiff PYPI version =5.0.1, =0.2.1, =0.1.7, =3.0.0b853, =0.0.1, =0.1.0, =1.8.15, =1.8.17, =0.112.0, =1.8.14, =1.0.0, =2.8.5, =0.1.6, =0.3.1, =0.4.5 and more Source cves: CVE-2025-58367 Source advisory: OSV:PYSEC-2026-327...

PYSEC-2026-327 DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more

Summary Python class pollution is a novel vulnerability categorized under CWE-915. The Delta class is vulnerable to class pollution via its constructor, and when combined with a gadget available in DeltaDiff itself, it can lead to Denial of Service and Remote Code Execution via insecure Pickle...

DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more

SummaryPython class pollution is a novel vulnerability categorized under CWE-915. The Delta class is vulnerable to class pollution via its constructor, and when combined with a gadget available in DeltaDiff itself, it can lead to Denial of Service and Remote Code Execution via insecure Pickle...

PT-2026-53419

Summary Python class pollution is a novel vulnerability categorized under CWE-915. The Delta class is vulnerable to class pollution via its constructor, and when combined with a gadget available in DeltaDiff itself, it can lead to Denial of Service and Remote Code Execution via insecure Pickle...

PT-2026-53470

A remote code execution RCE vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the deepdiff library. The library uses deepdiff.Delta objects to modify application state base...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in deepdiff-8.6.1-py3-none-any.whl

Summary IBM Watson Discovery Cartridge affected by vulnerability in deepdiff-8.6.1-py3-none-any.whl Vulnerability Details CVEID:CVE-2026-33155 DESCRIPTION: DeepDiff is a project focused on Deep Difference and search of any Python data. From version 5.0.0 to before version 8.6.2, the pickle...

openSUSE Security Advisory (SUSE-SU-2026:1094-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : python-deepdiff (SUSE-SU-2026:1094-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:1094-1 advisory. - CVE-2026-33155: Fixed denial of service via builtins.bytes, builtins.list, builtins.range bsc1260064. Tenable has extracted the preceding description block...