finetuning-scheduler (>=0.1.3, <=0.1.4), mridc (0.1.0) +3 more potentially affected by CVE-2024-5980 via pytorch-lightning (1.6.3)

pytorch-lightning PYPI version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler =0.1.3, =0.1.0, =0.1.2 - vocalforge 0.0.4 Source cves: CVE-2024-5980 Source advisory: OSV:PYSEC-2026-3975...

gpt3discord (>=11.7.1, <=12.3.8), gridplayer (>=0.5.0, <=0.5.1) +4 more potentially affected by CVE-2026-55404 via yt-dlp (2023.3.4)

yt-dlp PYPI version 2023.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - gpt3discord =11.7.1, =0.5.0, =0.9.3, =0.0.3, =0.3.0, =2023.3.7, =2023.6.17.post4 Source cves: CVE-2026-55404 Source advisory:...

finetuning-scheduler (>=0.1.3, <=0.1.4), mridc (0.1.0) +3 more potentially affected by CVE-2026-58659 via pytorch-lightning (1.6.3)

pytorch-lightning PYPI version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler =0.1.3, =0.1.0, =0.1.2 - vocalforge 0.0.4 Source cves: CVE-2026-58659 Source advisory: OSV:PYSEC-2026-396...

gpt3discord (>=11.7.1, <=12.3.8), gridplayer (>=0.5.0, <=0.5.1) +4 more potentially affected by CVE-2026-50574 via yt-dlp (2023.3.4)

yt-dlp PYPI version 2023.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - gpt3discord =11.7.1, =0.5.0, =0.9.3, =0.0.3, =0.3.0, =2023.3.7, =2023.6.17.post4 Source cves: CVE-2026-50574 Source advisory: OSV:PYSEC-2026-3433...

gpt3discord (>=11.7.1, <=12.3.8), gridplayer (>=0.5.0, <=0.5.1) +4 more potentially affected by CVE-2026-50023 via yt-dlp (2023.3.4)

yt-dlp PYPI version 2023.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - gpt3discord =11.7.1, =0.5.0, =0.9.3, =0.0.3, =0.3.0, =2023.3.7, =2023.6.17.post4 Source cves: CVE-2026-50023 Source advisory: OSV:PYSEC-2026-3430...

finetuning-scheduler (>=0.1.3, <=0.1.4), mridc (0.1.0) +3 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.6.3)

pytorch-lightning PYPI version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler =0.1.3, =0.1.0, =0.1.2 - vocalforge 0.0.4 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-304...

nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2026-24159 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2026-24159 Source advisory: OSV:PYSEC-2026-2675...

nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2026-24157 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2026-24157 Source advisory: OSV:PYSEC-2026-2674...

nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2025-33245 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2025-33245 Source advisory: OSV:PYSEC-2026-2672...

nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2025-33253 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2025-33253 Source advisory: OSV:PYSEC-2026-2673...

finetuning-scheduler (>=0.1.3, <=0.1.4), mridc (0.1.0) +3 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.6.3)

pytorch-lightning PYPI version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler =0.1.3, =0.1.0, =0.1.2 - vocalforge 0.0.4 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-1857...

finetuning-scheduler (>=0.1.3, <=0.1.4), mridc (0.1.0) +3 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.6.3)

pytorch-lightning PYPI version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler =0.1.3, =0.1.0, =0.1.2 - vocalforge 0.0.4 Source cves: CVE-2024-8019 Source advisory: OSV:PYSEC-2026-507...

gpt3discord (>=11.7.1, <=12.3.8), gridplayer (>=0.5.0, <=0.5.1) +4 more potentially affected by CVE-2026-50574 via yt-dlp (2023.3.4)

yt-dlp PYPI version 2023.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - gpt3discord =11.7.1, =0.5.0, =0.9.3, =0.0.3, =0.3.0, =2023.3.7, =2023.6.17.post4 Source cves: CVE-2026-50574 Source advisory:...

gpt3discord (>=11.7.1, <=12.3.8), gridplayer (>=0.5.0, <=0.5.1) +4 more potentially affected by CVE-2026-50023 via yt-dlp (2023.3.4)

yt-dlp PYPI version 2023.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - gpt3discord =11.7.1, =0.5.0, =0.9.3, =0.0.3, =0.3.0, =2023.3.7, =2023.6.17.post4 Source cves: CVE-2026-50023 Source advisory:...

finetuning-scheduler (>=0.1.3, <=0.1.4), mridc (0.1.0) +3 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.6.3)

pytorch-lightning PYPI version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler =0.1.3, =0.1.0, =0.1.2 - vocalforge 0.0.4 Source cves: CVE-2026-31221 Source advisory:...

nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2026-24159 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2026-24159 Source advisory: OSV:GHSA-V7V2-M736-CF3C...

nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2026-24157 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2026-24157 Source advisory: OSV:GHSA-M4JW-WGMF-889X...

nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2025-33253 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2025-33253 Source advisory: OSV:GHSA-HVJW-VP7G-39H5...

nemo-curator (0.5.1), neural-sync (>=0.1.0, <=0.1.2) +2 more potentially affected by CVE-2025-33245 via nemo-toolkit (1.23.0)

nemo-toolkit PYPI version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on nemo-toolkit and may be impacted: - nemo-curator 0.5.1 - neural-sync =0.1.0, =0.1.0, =0.0.3, =0.0.4 Source cves: CVE-2025-33245 Source advisory: OSV:GHSA-9379-MWVR-7WXX...

finetuning-scheduler (>=0.1.3, <=0.1.4), mridc (0.1.0) +3 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.6.3)

pytorch-lightning PYPI version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler =0.1.3, =0.1.0, =0.1.2 - vocalforge 0.0.4 Source cves: CVE-2024-8020 Source advisory:...