autogluon-timeseries (>=0.6.3b20230121, <=0.6.3b20230209), contra-il6 (>=1.0.1, <=1.0.4) +17 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.8.6)

pytorch-lightning PYPI version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon-timeseries =0.6.3b20230121, =1.0.1, =1.2.5, =1.3.2, =0.2.0, =0.1.2, =4.0.0rc0, =1.2.43, =1.0.0, =0.1.0, =0.2.1 -...

autogluon-timeseries (>=0.6.3b20230121, <=0.6.3b20230209), contra-il6 (>=1.0.1, <=1.0.4) +17 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.8.6)

pytorch-lightning PYPI version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon-timeseries =0.6.3b20230121, =1.0.1, =1.2.5, =1.3.2, =0.2.0, =0.1.2, =4.0.0rc0, =1.2.43, =1.0.0, =0.1.0, =0.2.1 -...

autoalbument (0.4.0), deepethogram (>=0.1.0, <=0.1.2) +8 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.1.8)

pytorch-lightning PYPI version 1.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autoalbument 0.4.0 - deepethogram =0.1.0, =1.1.0, =0.2.0, =0.2.0, =0.4.0, =0.6.0 Source cves: CVE-2026-31221 Source advisory:...