lightning vulnerabilities
CVEs whose affected-version data names the lightning package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2024-5980Critical· 9.1pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
▾ Midnightlightning · lightningEPSS 1.3%via OSV
CVE-2024-5452Critical· 9.8PoCRemote code execution in pytorch lightning
Remote code execution in pytorch lightning
▾ Abyssallightning · lightningEPSS 27%via OSV