Skip to content
OpenAdvisories
High · 7.8 CVE-2021-4118 EUVD-2021-0212GHSA-2vj5-px25-gjrpPYSEC-2021-874PYSEC-2026-3968

Deserialization of Untrusted Data in pytorchlightning/pytorch-lightning

Published Dec 23, 2021 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: pytorchlightning Product: pytorchlightning/pytorch-lightning Package: lightning Package: pytorch-lightning Ecosystem: PyPI

Description

pytorch-lightning is vulnerable to Deserialization of Untrusted Data

Affected products

VendorProductAffectedFixed
pytorchlightning pytorchlightning/pytorch-lightning unspecified – < 1.6 1.6

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI lightning < 1.6.0 1.6.0 PYSEC-2026-3968
PyPI pytorch-lightning < 1.6.0 1.6.0 GHSA-2vj5-px25-gjrp

References