aana (>=0.2.1 <=0.2.2.2), adaptive-kmpc-py (>=0.1.0 <=0.1.1) +1012 more potentially affected by unknown CVE via lightning (>=2.0.0 <=2.6.1)

lightning PYPI version =2.0.0, =0.2.1, =0.1.0, =2.0.0, =1.3.0, =0.2.0, =2025.4.0, =0.0.0, =0.1.11, =1.9.0, =1.9.0, =0.1.16, =0.0.39, =0.4.38 and more Source cves: unknown CVE Source advisory: OSV:MAL-2026-3201...

aana (>=0.2.1 <=0.2.2.2), adaptive-kmpc-py (>=0.1.0 <=0.1.1) +1019 more potentially affected by CVE-2026-44484 via lightning (>=1.8.6 <=2.6.1)

lightning PYPI version =1.8.6, =0.2.1, =0.1.0, =2.0.0, =1.3.0, =0.2.0, =2025.4.0, =0.0.0, =0.1.11, =1.8.15, =1.8.17, =1.8.14, =0.1.16, =1.0.1rc1 and more Source cves: CVE-2026-44484 Source advisory: SNYK:PYTHON-LIGHTNING-16323121...

EUVD-2019-4573

Malware in sbrugna...

EUVD-2021-0212

Malware in sbrugna...

EUVD-2025-6922

Malicious code in bioql PyPI...

GHSA-98FP-7V67-4V3Q PyTorch Lightning denial of service vulnerability

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server...

PT-2025-12205 · Lightning Ai · Pytorch-Lightning

Name of the Vulnerable Software and Affected Versions: pytorch-lightning version 2.3.2 Description: A vulnerability in pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue...

CVE-2021-4118

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

adaptive-kmpc-py (>=0.1.0 <=0.1.1), aestetik (=0.1.0) +100 more potentially affected by CVE-2024-5452 via lightning (>=1.8.6 <=2.3.2)

lightning PYPI version =1.8.6, =0.1.0, =1.8.15, =1.8.17, =1.8.14, =0.8.3b20230916, =0.8.3b20230916, =0.8.3b20230916, =0.1.1, =0.0.1, =0.1.0, =0.5.0a1, =0.5.3 and more Source cves: CVE-2024-5452 Source advisory: OSV:GHSA-CGWC-QVRX-RF7F...

PT-2024-36377 · Unknown +1 · Pytorch-Lightning +1

Name of the Vulnerable Software and Affected Versions: pytorch-lightning version 2.2.1 Description: A remote code execution issue exists due to improper handling of deserialized user input and mismanagement of dunder attributes by the deepdiff library. The library uses deepdiff.Delta objects to...

PT-2023-27341

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue concerns a lightning vulnerability related to replacement cycling attacks. It is noted that decentralization is viewed as a spectrum, but it does...