Code Injection in PyTorch Lightning

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-0845 · ADVISORY
• PyTorchLightning/pytorch-lightning#12212 · WEB
• pytorchlightning/pytorch-lightning commit 8b7a12c · WEB
• GitHub Advisory GHSA-r5qj-cvf9-p85h · ADVISORY
• pypa/advisory-database · WEB
• pytorchlightning/pytorch-lightning · WEB
• huntr.dev/bounties/a795bf93-c91e-4c79-aae8-f7d8bda92e2a · WEB

lightning のその他の脆弱性

• CVE-2026-58659高 7.8PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that im…
• CVE-2026-44484緊急 9.8PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality co…
• CVE-2026-31221高 7.8PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism…
• CVE-2024-8020高 7.5A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POS…
• CVE-2024-8019緊急 9.1In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the `LightningApp` when running on a Windows host. The vulnerabil…