Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-3972
  • PyPI/lightning
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization 10 Sep
  • No fix available
  • Severity - 7.8 (High)
PYSEC-2026-3973
  • PyPI/lightning
Compromise of PyTorch Lightning PyPi Package Versions 10 Sep
  • Fix available
  • Severity - 9.3 (Critical)
PYSEC-2026-3968
  • PyPI/lightning
  • github.com/pytorchlightning/pytorch-lightning
See record for full details 10 Sep
  • Fix available
PYSEC-2026-3971
  • PyPI/lightning
PyTorch Lightning denial of service vulnerability 10 Sep
  • No fix available
  • Severity - 7.5 (High)
PYSEC-2026-3969
  • PyPI/lightning
  • github.com/pytorchlightning/pytorch-lightning
See record for full details 10 Sep
  • Fix available
PYSEC-2026-3970
  • PyPI/lightning
PyTorch Lightning path traversal vulnerability 10 Sep
  • Fix available
  • Severity - 9.1 (Critical)
PYSEC-2026-3975
  • PyPI/pytorch-lightning
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint 10 Sep
  • Fix available
  • Severity - 9.1 (Critical)
PYSEC-2026-3974
  • PyPI/pytorch-lightning
Remote code execution in pytorch lightning 10 Sep
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-qqmf-gpg7-g8gw
  • PyPI/lightning
PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters 15 Jul
  • Fix available
  • Severity - 8.4 (High)
PYSEC-2026-3624
  • PyPI/lightning
See record for full details 15 Jul
  • Fix available
  • Severity - 8.4 (High)
PYSEC-2026-3967
  • PyPI/pytorch-lightning
See record for full details 15 Jul
  • Fix available
  • Severity - 8.4 (High)
PYSEC-2026-3043
  • PyPI/pytorch-lightning
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization 13 Jul
  • No fix available
  • Severity - 7.8 (High)
PYSEC-2026-1857
  • PyPI/pytorch-lightning
PyTorch Lightning denial of service vulnerability 07 Jul
  • No fix available
  • Severity - 7.5 (High)
PYSEC-2026-508
  • PyPI/pytorch-lightning
Compromise of PyTorch Lightning PyPi Package Versions 29 Jun
  • Fix available
  • Severity - 9.3 (Critical)
PYSEC-2026-385
  • PyPI/lightning
Remote code execution in pytorch lightning 29 Jun
  • Fix available
  • Severity - 9.8 (Critical)
PYSEC-2026-386
  • PyPI/lightning
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint 29 Jun
  • Fix available
  • Severity - 9.1 (Critical)