AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

pytorch-lightning security advisories

9 advisories · 5 critical or high in 12 months · latest Sep 10

Repository

9 advisories

Critical 9.8Sep 10Remote code execution in pytorch lightningCVE-2024-5452fixed in 2.3.3Critical 9.1Sep 10pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpointCVE-2024-5980fixed in 2.3.3High 7.8Jul 15pytorch-lightning: remote code executionCVE-2026-58659fixed in 2.6.6High 7.8May 12PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserializationCVE-2026-31221no fix yetCritical 9.8May 7Compromise of PyTorch Lightning PyPi Package VersionsCVE-2026-44484no fix yetHigh 7.5Mar 20, 2025PyTorch Lightning denial of service vulnerabilityCVE-2024-8020no fix yetCritical 9.1Mar 20, 2025PyTorch Lightning path traversal vulnerabilityCVE-2024-8019fixed in 2.4.0Critical 9.8Mar 6, 2022Code Injection in PyTorch LightningCVE-2022-0845fixed in 1.6.0High 7.8Jan 6, 2022pytorch-lightning is vulnerable to Deserialization of Untrusted DataCVE-2021-4118fixed in 1.6.0
About pytorch-lightning

Pretrain, finetune ANY AI model of ANY size on 1 or 10,000+ GPUs with zero code changes.

Packages watched: pytorch-lightning (PyPI).

Lightning-AI/pytorch-lightningOn Repos