finetuning-scheduler (>=0.1.3, <=0.1.4), mridc (0.1.0) +3 more potentially affected by CVE-2024-5980 via pytorch-lightning (1.6.3)

pytorch-lightning PYPI version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler =0.1.3, =0.1.0, =0.1.2 - vocalforge 0.0.4 Source cves: CVE-2024-5980 Source advisory: OSV:PYSEC-2026-3975...