quickvision (>=0.2.0rc1, <=0.2.1) potentially affected by CVE-2024-5980 via pytorch-lightning (1.2.6)

pytorch-lightning PYPI version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - quickvision =0.2.0rc1, =0.2.1 Source cves: CVE-2024-5980 Source advisory: OSV:PYSEC-2026-3975...

pytorch-segmentation-models-trainer (0.15.0) potentially affected by CVE-2024-5452 via pytorch-lightning (1.5.2)

pytorch-lightning PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pytorch-segmentation-models-trainer 0.15.0 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-3974...

clarinpl-embeddings (>=0.0.1rc158803945536, <=0.0.1rc158956732038), cluster-depp-test (>=0.0.3, <=0.0.21) +5 more potentially affected by CVE-2024-5980 via pytorch-lightning (1.5.4)

pytorch-lightning PYPI version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - clarinpl-embeddings =0.0.1rc158803945536, =0.0.3, =0.3.0, =0.3.0, =0.1.0, =0.0.0.77, =0.0.0.79 -...

cogexquestgen (>=1.0.0, <=1.0.3), deepmorpheus (>=0.2.1, <=0.2.3) potentially affected by CVE-2024-5452 via pytorch-lightning (0.8.4)

pytorch-lightning PYPI version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - cogexquestgen =1.0.0, =0.2.1, =0.2.3 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-3974...

backprop (>=0.0.1, <=0.0.2), kiri (>=0.5.0.dev1, <=0.5.1) +3 more potentially affected by CVE-2024-5980 via pytorch-lightning (1.1.0)

pytorch-lightning PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - backprop =0.0.1, =0.5.0.dev1, =1.0.2, =0.1.1rc3, =0.1.1 - ragcar 0.1.0 Source cves: CVE-2024-5980 Source advisory:...

adversarial-insight-ml (0.1.0), aihandler (>=1.8.15, <=1.8.20) +99 more potentially affected by CVE-2024-5452 via pytorch-lightning (>=2.0.0rc0, <=2.3.0)

pytorch-lightning PYPI version =2.0.0rc0, =1.8.15, =1.8.17, =1.8.14, =0.8.3b20230817, =0.8.3b20230802, =0.1.1, =0.1.0, =0.9.0, =0.0.15, =0.3.0, =0.4.5 - chatairunner 1.0.10 and more Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-3974...

bio-transformers (>=0.0.7, <=0.1.2), biome-text (>=3.0.0, <=3.2.1) +21 more potentially affected by CVE-2024-5980 via pytorch-lightning (1.3.8)

pytorch-lightning PYPI version 1.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bio-transformers =0.0.7, =3.0.0, =0.5.9, =0.1.0, =0.0.22, =0.0.11, =0.7.1, =0.4.5, =0.4.6 and more Source cves: CVE-2024-5980...

acids-msprior (>=1.0.1, <=1.1.3), acids-rave (>=2.1.16, <=2.3.1) +9 more potentially affected by CVE-2024-5452 via pytorch-lightning (1.9.0)

pytorch-lightning PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - acids-msprior =1.0.1, =2.1.16, =0.0.2, =0.0.1, =0.2.6, =0.4.9, =0.4.0, =0.7.5 - swyft 0.4.2 - tencent-wedata-auto-ml 0.2.39...

code2seq (>=0.0.0, <=0.0.4), disent (>=0.0.1.dev1, <=0.0.1.dev11) +3 more potentially affected by CVE-2024-5452 via pytorch-lightning (1.1.7)

pytorch-lightning PYPI version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - code2seq =0.0.0, =0.0.1.dev1, =0.3.0.0, =0.0.0.4, =0.0.0.8 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-3974...

Compromise of PyTorch Lightning PyPi Package Versions

Security Advisory: Compromise of PyTorch Lightning PyPI Package Versions Published: 2026-04-30 Last Updated: 2026-05-12 Github Advisory: CVE-2026-44484We have identified a security incident affecting certain versions of one of our PyPI packages. What happenedWe have determined that one or more...

PYSEC-2026-3969

Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0...

geniverse (>=0.0.1, <=0.0.12.12), hugging-gan-test (>=0.0.1, <=0.2.29) +1 more potentially affected by CVE-2024-5980 via pytorch-lightning (1.3.3)

pytorch-lightning PYPI version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - geniverse =0.0.1, =0.0.1, =0.2.29 - ratsnlp 0.0.9983 Source cves: CVE-2024-5980 Source advisory: OSV:PYSEC-2026-3975...

dimweb-persona-bot (0.0.6), finetuning-scheduler (0.2.2) +1 more potentially affected by CVE-2024-5452 via pytorch-lightning (1.7.6)

pytorch-lightning PYPI version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - dimweb-persona-bot 0.0.6 - finetuning-scheduler 0.2.2 - gts-engine 0.1.3 Source cves: CVE-2024-5452 Source advisory:...

PYSEC-2026-3969

Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0...

bytesep (>=0.0.1, <=0.1.1), bytesep-fancybit (0.0.8) +2 more potentially affected by CVE-2024-5980 via pytorch-lightning (1.2.1)

pytorch-lightning PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - bytesep =0.0.1, =0.1.0, =0.0.0, =0.0.2 Source cves: CVE-2024-5980 Source advisory: OSV:PYSEC-2026-3975...

chatmof (>=0.2.0, <=0.2.2), finetuning-scheduler (0.2.0) +2 more potentially affected by CVE-2024-5980 via pytorch-lightning (1.7.0)

pytorch-lightning PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - chatmof =0.2.0, =1.1.2, =0.3.7, =0.3.11 Source cves: CVE-2024-5980 Source advisory: OSV:PYSEC-2026-3975...

databalancer (>=0.0.7, <=0.0.8), torchline (>=0.3.0.0a0, <=0.3.0.1) potentially affected by CVE-2024-5980 via pytorch-lightning (0.7.5)

pytorch-lightning PYPI version 0.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - databalancer =0.0.7, =0.3.0.0a0, =0.3.0.1 Source cves: CVE-2024-5980 Source advisory: OSV:PYSEC-2026-3975...

olorenchemengine (>=0.0.0, <=1.0.3), recsys-slates-dataset (>=0.0.5, <=0.0.6) potentially affected by CVE-2024-5980 via pytorch-lightning (1.4.1)

pytorch-lightning PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - olorenchemengine =0.0.0, =0.0.5, =0.0.6 Source cves: CVE-2024-5980 Source advisory: OSV:PYSEC-2026-3975...

acids-msprior (>=1.0.1, <=1.1.3), acids-rave (>=2.1.16, <=2.3.1) +9 more potentially affected by CVE-2024-5980 via pytorch-lightning (1.9.0)

pytorch-lightning PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - acids-msprior =1.0.1, =2.1.16, =0.0.2, =0.0.1, =0.2.6, =0.4.9, =0.4.0, =0.7.5 - swyft 0.4.2 - tencent-wedata-auto-ml 0.2.39...

moai-mdk (>=0.1.0a1, <=0.1.0a2) potentially affected by CVE-2024-5980 via pytorch-lightning (1.0.7)

pytorch-lightning PYPI version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - moai-mdk =0.1.0a1, =0.1.0a2 Source cves: CVE-2024-5980 Source advisory: OSV:PYSEC-2026-3975...