Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Pytorch Lightning HIGH 7.8
CVE-2026-58659

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and…

Fix: after 2.6.5
Fix from $1,950 2026-07-15
Pytorch Lightning CRITICAL 9.8
CVE-2026-44484

PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent …

No fix yet
Fix from $2,300 2026-05-14
Pytorch Lightning HIGH 7.8
CVE-2026-31221

PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The Lig…

Fix: after 2.6.0
Fix from $1,950 2026-05-12
Pytorch Lightning CRITICAL 9.1
CVE-2024-8019

In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the `LightningApp` when running on a Windows host. The vulnerability occur…

Patch available
Fix from $2,300 2025-03-20
Pytorch Lightning HIGH 7.5
CVE-2024-8020

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request…

No fix yet
Fix from $1,950 2025-03-20
Pytorch Lightning CRITICAL 9.8
CVE-2024-5980

A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.…

Fix: 2.3.3+
Fix from $2,300 2024-06-27
Pytorch Lightning CRITICAL 9.8
CVE-2024-5452EPSS 26%

A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserializ…

Fix: 2.3.3+
Fix from $2,300 2024-06-06
Pytorch Lightning CRITICAL 9.8
CVE-2022-0845

Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0.

Fix: 1.6.0+
Fix from $2,300 2022-03-05
Pytorch Lightning HIGH 7.8
CVE-2021-4118

pytorch-lightning is vulnerable to Deserialization of Untrusted Data

Fix: 1.6.0+
Fix from $1,950 2021-12-23