pytorch-lightning is vulnerable to Deserialization of Untrusted Data

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-4118 · ADVISORY
• PyTorchLightning/pytorch-lightning · WEB
• PyTorchLightning/pytorch-lightning#11099 · WEB
• pytorchlightning/pytorch-lightning commit 62f1e82 · WEB
• PyTorchLightning/pytorch-lightning release 1.6.0 · WEB
• GitHub Advisory GHSA-2vj5-px25-gjrp · ADVISORY
• pypa/advisory-database · WEB
• pytorchlightning/pytorch-lightning · PACKAGE
• huntr.dev/bounties/31832f0c-e5bb-4552-a12c-542f81f111e6 · WEB

lightning のその他の脆弱性

• CVE-2026-58659高 7.8PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that im…
• CVE-2026-44484緊急 9.8PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality co…
• CVE-2026-31221高 7.8PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism…
• CVE-2024-8020高 7.5A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POS…
• CVE-2024-8019緊急 9.1In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the `LightningApp` when running on a Windows host. The vulnerabil…