pytorch-lightning vulnerabilities
CVEs whose affected-version data names the pytorch-lightning package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
6 CVEsRSS
CVE-2026-31221High· 7.8PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
▾ Twilightpytorch-lightning · pytorch-lightningEPSS 0.39%via OSV
CVE-2026-44484Critical· 9.8Compromise of PyTorch Lightning PyPi Package Versions
Compromise of PyTorch Lightning PyPi Package Versions
▾ Midnightpytorch-lightning · pytorch-lightningEPSS 0.39%via OSV
CVE-2024-8019Critical· 9.1PyTorch Lightning path traversal vulnerability
PyTorch Lightning path traversal vulnerability
▾ Midnightpytorch-lightning · pytorch-lightningEPSS 1.1%via OSV
CVE-2024-8020High· 7.5PyTorch Lightning denial of service vulnerability
PyTorch Lightning denial of service vulnerability
▾ Twilightpytorch-lightning · pytorch-lightningEPSS 0.63%via OSV
CVE-2022-0845Critical· 9.8Code Injection in PyTorch Lightning
Code Injection in PyTorch Lightning
▾ Midnightpytorch-lightning · pytorch-lightningEPSS 0.98%via OSV
CVE-2021-4118High· 7.8pytorch-lightning is vulnerable to Deserialization of Untrusted Data
pytorch-lightning is vulnerable to Deserialization of Untrusted Data
▾ Twilightpytorch-lightning · pytorch-lightningEPSS 0.98%via OSV