dlk (>=0.0.1, <=0.0.4) potentially affected by CVE-2024-5452 via pytorch-lightning (1.5.5)

pytorch-lightning PYPI version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - dlk =0.0.1, =0.0.4 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-3974...

nemo-toolkit (1.1.0) potentially affected by CVE-2024-5452 via pytorch-lightning (1.3.7.post0)

pytorch-lightning PYPI version 1.3.7.post0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - nemo-toolkit 1.1.0 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-3974...

cookiellmtest (>=1.0.1, <=1.0.6), cookienlp (>=1.0.0, <=1.0.2) +3 more potentially affected by CVE-2024-5452 via pytorch-lightning (1.6.1)

pytorch-lightning PYPI version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cookiellmtest =1.0.1, =1.0.0, =1.0.52, =1.0.53 - smallteacher 0.0.1 Source cves: CVE-2024-5452 Source advisory:...

asteroid (>=0.3.1rc0, <=0.3.2), borisml (>=0.0.2, <=0.1.0) +3 more potentially affected by CVE-2024-5452 via pytorch-lightning (0.7.6)

pytorch-lightning PYPI version 0.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.3.1rc0, =0.0.2, =0.1.0, =0.3.0.2, =0.3.0.4 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-3974...

PYSEC-2026-3969

Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0...

medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2024-8019 via lightning (1.9.5)

lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2024-8019 Source advisory: OSV:PYSEC-2026-3970...

autogluon-timeseries (>=0.6.3b20230121, <=0.6.3b20230209), contra-il6 (>=1.0.1, <=1.0.4) +17 more potentially affected by CVE-2024-5452 via pytorch-lightning (1.8.6)

pytorch-lightning PYPI version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - autogluon-timeseries =0.6.3b20230121, =1.0.1, =1.2.5, =1.3.2, =0.2.0, =0.1.2, =4.0.0rc0, =1.2.43, =1.0.0, =0.1.0, =0.2.1 -...

torchline (>=0.1.0, <=0.1.4.2) potentially affected by CVE-2024-5980 via pytorch-lightning (0.5.3.2)

pytorch-lightning PYPI version 0.5.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - torchline =0.1.0, =0.1.4.2 Source cves: CVE-2024-5980 Source advisory: OSV:PYSEC-2026-3975...

finetuning-scheduler (0.2.1), nlhappy (2022.9.14) +1 more potentially affected by CVE-2024-5980 via pytorch-lightning (1.7.1)

pytorch-lightning PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.2.1 - nlhappy 2022.9.14 - pytorch-segmentation-models-trainer 0.17.0 Source cves: CVE-2024-5980 Source...

databalancer (>=0.0.7, <=0.0.8), torchline (>=0.3.0.0a0, <=0.3.0.1) potentially affected by CVE-2024-5452 via pytorch-lightning (0.7.5)

pytorch-lightning PYPI version 0.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - databalancer =0.0.7, =0.3.0.0a0, =0.3.0.1 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-3974...

mimikit (>=0.2.3, <=0.2.6) potentially affected by CVE-2024-5452 via pytorch-lightning (1.2.4)

pytorch-lightning PYPI version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - mimikit =0.2.3, =0.2.6 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-3974...

finetuning-scheduler (0.1.2), gts-engine (>=0.1.1, <=0.1.2) +3 more potentially affected by CVE-2024-5452 via pytorch-lightning (1.6.2)

pytorch-lightning PYPI version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.1.2 - gts-engine =0.1.1, =0.3.3, =0.1.0, =0.1.5 Source cves: CVE-2024-5452 Source advisory:...

moai-mdk (>=0.1.1a1, <=0.1.5a34), openstf (2.6.3) potentially affected by CVE-2024-5452 via pytorch-lightning (1.5.1)

pytorch-lightning PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - moai-mdk =0.1.1a1, =0.1.5a34 - openstf 2.6.3 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-3974...

medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2024-8020 via lightning (1.9.5)

lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-3971...

chatmof (>=0.2.0, <=0.2.2), finetuning-scheduler (0.2.0) +2 more potentially affected by CVE-2024-5452 via pytorch-lightning (1.7.0)

pytorch-lightning PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - chatmof =0.2.0, =1.1.2, =0.3.7, =0.3.11 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-3974...

bigdl-chronos (2.0.0), bigdl-chronos-spark2 (2.0.0) +10 more potentially affected by CVE-2024-5452 via pytorch-lightning (1.6.4)

pytorch-lightning PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bigdl-chronos 2.0.0 - bigdl-chronos-spark2 2.0.0 - bigdl-chronos-spark3 2.0.0 - dicee =0.0.2, =0.1.5, =0.0.2, =0.0.3, =1.0.0,...

mimikit (>=0.1.0, <=0.1.10), pytorch-hyperlight (0.1.3) potentially affected by CVE-2024-5452 via pytorch-lightning (1.1.2)

pytorch-lightning PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - mimikit =0.1.0, =0.1.10 - pytorch-hyperlight 0.1.3 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-3974...

deep-learning-plus (>=0.0.5, <=0.0.7), torchfl (>=0.1.1, <=0.1.5) potentially affected by CVE-2024-5452 via pytorch-lightning (1.5.7)

pytorch-lightning PYPI version 1.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - deep-learning-plus =0.0.5, =0.1.1, =0.1.5 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-3974...

classy-core (>=0.2.1.dev20220303, <=0.2.1), open-metric-learning (>=0.3.0, <=0.3.6) potentially affected by CVE-2024-5452 via pytorch-lightning (1.5.9)

pytorch-lightning PYPI version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - classy-core =0.2.1.dev20220303, =0.3.0, =0.3.6 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-3974...

bigdl (2.0.0), bigdl-spark2 (2.0.0) +9 more potentially affected by CVE-2024-5452 via pytorch-lightning (1.4.2)

pytorch-lightning PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bigdl 2.0.0 - bigdl-spark2 2.0.0 - bigdl-spark3 2.0.0 - classy-imaginary 0.3.5 - imaginairy =0.7.2, =1.1.1rc2, =2.0.14, =2.1.0...