{"data":{"id":"6ead1866-f739-49c6-a2f7-5413b9fc4a90","title":"CVE-2022-0845: Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0.","summary":"CVE-2022-0845 is a Code Injection flaw (CWE-94, Improper Control of Generation of Code) in the GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0. NVD has not yet provided an assessment, and the record cites a huntr.dev advisory and a GitHub commit as references.","solution":"Patch: the source links a GitHub commit (https://github.com/pytorchlightning/pytorch-lightning/commit/8b7a12c52e52a06408e9231647839ddb4665e8ae) tagged as a patch, but it does not state a fixed version beyond the affected range \"prior to 1.6.0.\"","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-0845","publishedAt":"2022-03-06T03:15:07.843Z","cveId":"CVE-2022-0845","cweIds":["CWE-94","CWE-94"],"cvssScore":"9.8","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["pytorch-lightning@< 1.6.0 (fixed: 1.6.0)"],"affectedPackageNames":["pytorch-lightning"],"affectedPackageRefs":["pypi:pytorch-lightning"],"affectedVendors":[],"affectedVendorsRaw":["PyTorch Lightning"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"pytorch-lightning code injection in GitHub repository before 1.6.0","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00999,"epssCheckedAt":"2026-11-04T06:10:15.975Z","kevDateAdded":null,"advisoryAliases":["GHSA-r5qj-cvf9-p85h"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:58:23.273Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2022-03-29T19:46:24.191Z","daysToFix":23,"fixCheckedAt":"2026-10-29T21:48:55.979Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"pytorch-lightning","fixedVersion":"1.6.0","matchedVersion":"1.6.0","fixReleasedAt":"2022-03-29T19:46:24.191Z","daysToFix":23,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:48:55.824Z"}]}}