Remote Code Execution (RCE)

pytorchlightning is vulnerable to remote code execution. The vulnerability exists due to the lack of sanitization of the insecure eval function allowing an attacker to inject maliciously crafted script into the system...

Deserialization Of Untrusted Data

pytorchlightning is vulnerable to deserialization of untrusted data. The vulnerability is due to an insecure method call in loadhparamsfromyaml function of savings.py which allows a malicious attacker to send malicious yaml config files, leading to remote code execution...