pytorch-lightning is vulnerable to Deserialization of Untrusted Data

HIGH 7.8CVE-2021-4118 · GHSA-2vj5-px25-gjrp · PYSEC-2021-874 · Published 23/12/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
lightning PyPI	`< 1.6.0`	`1.6.0`
pytorch-lightning PyPI	`< 1.6.0`	`1.6.0`
pytorch lightning lightningai	`< 1.6.0`	`1.6.0`

Description

pytorch-lightning is vulnerable to Deserialization of Untrusted Data.

NVD description

pytorch-lightning is vulnerable to Deserialization of Untrusted Data

Running one of these products? Scan your site to see whether it exposes a vulnerable version.