{"data":{"ecosystem":"pypi","name":"pytorch-lightning","url":"https://aisecwatch.com/packages/pypi/pytorch-lightning","latestVersion":"2.6.6","firstReleaseAt":"2019-03-31T20:32:02.170Z","repository":"https://github.com/Lightning-AI/lightning","llm":{"exposure":"direct","depth":0,"integratedAt":"2025-11-05T20:48:24.558Z","integratedVersion":"2.6.0.dev0","sdks":["huggingface"],"path":[]},"authority":{"profile":["http"],"fromDependencies":["pypi:requests"]},"dependencies":[{"ecosystem":"pypi","name":"bitsandbytes","versionSpec":">=0.45.2","scope":"extra:extra"},{"ecosystem":"pypi","name":"deepspeed","versionSpec":"<0.17.0,>=0.15.0","scope":"extra:strategies"},{"ecosystem":"pypi","name":"huggingface-hub","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"torchmetrics","versionSpec":">0.7.0","scope":"runtime"},{"ecosystem":"pypi","name":"cloudpickle","versionSpec":">=1.3","scope":"extra:test"},{"ecosystem":"pypi","name":"coverage","versionSpec":"==7.13.4","scope":"extra:test"},{"ecosystem":"pypi","name":"fastapi","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"fsspec","versionSpec":">=2022.5.0","scope":"runtime"},{"ecosystem":"pypi","name":"hydra-core","versionSpec":">=1.2.0","scope":"extra:extra"},{"ecosystem":"pypi","name":"ipython","versionSpec":">=8.0.0","scope":"extra:examples"},{"ecosystem":"pypi","name":"jsonargparse","versionSpec":">=4.39.0","scope":"extra:extra"},{"ecosystem":"pypi","name":"lightning-utilities","versionSpec":">=0.10.0","scope":"runtime"},{"ecosystem":"pypi","name":"matplotlib","versionSpec":">3.1","scope":"extra:extra"},{"ecosystem":"pypi","name":"numpy","versionSpec":">1.21.0","scope":"extra:test"},{"ecosystem":"pypi","name":"omegaconf","versionSpec":">=2.2.3","scope":"extra:extra"},{"ecosystem":"pypi","name":"onnx","versionSpec":">1.12.0","scope":"extra:test"},{"ecosystem":"pypi","name":"onnx-ir","versionSpec":"<0.1.16","scope":"extra:test"},{"ecosystem":"pypi","name":"onnxruntime","versionSpec":">=1.12.0","scope":"extra:test"},{"ecosystem":"pypi","name":"onnxscript","versionSpec":">=0.1.0","scope":"extra:test"},{"ecosystem":"pypi","name":"packaging","versionSpec":">=23.0","scope":"runtime"},{"ecosystem":"pypi","name":"pandas","versionSpec":">2.0","scope":"extra:test"},{"ecosystem":"pypi","name":"psutil","versionSpec":"<7.3.0","scope":"extra:test"},{"ecosystem":"pypi","name":"pytest","versionSpec":"==9.0.2","scope":"extra:test"},{"ecosystem":"pypi","name":"pytest-cov","versionSpec":"==7.0.0","scope":"extra:test"},{"ecosystem":"pypi","name":"pytest-random-order","versionSpec":"==1.2.0","scope":"extra:test"},{"ecosystem":"pypi","name":"pytest-rerunfailures","versionSpec":"==16.0.1","scope":"extra:test"},{"ecosystem":"pypi","name":"pytest-timeout","versionSpec":"==2.4.0","scope":"extra:test"},{"ecosystem":"pypi","name":"pyyaml","versionSpec":">5.4","scope":"runtime"},{"ecosystem":"pypi","name":"requests","versionSpec":"<2.33.0","scope":"extra:examples"},{"ecosystem":"pypi","name":"rich","versionSpec":">=12.3.0","scope":"extra:extra"},{"ecosystem":"pypi","name":"scikit-learn","versionSpec":">0.22.1","scope":"extra:test"},{"ecosystem":"pypi","name":"tensorboard","versionSpec":">=2.11","scope":"extra:test"},{"ecosystem":"pypi","name":"tensorboardx","versionSpec":">=2.2","scope":"extra:extra"},{"ecosystem":"pypi","name":"tensorrt","versionSpec":"<10.13.1","scope":"extra:test-gpu"},{"ecosystem":"pypi","name":"torch","versionSpec":">=2.1.0","scope":"runtime"},{"ecosystem":"pypi","name":"torch-tensorrt","versionSpec":null,"scope":"extra:test-gpu"},{"ecosystem":"pypi","name":"torchvision","versionSpec":">=0.16.0","scope":"extra:examples"},{"ecosystem":"pypi","name":"tqdm","versionSpec":">=4.57.0","scope":"runtime"},{"ecosystem":"pypi","name":"typing-extensions","versionSpec":">4.5.0","scope":"runtime"},{"ecosystem":"pypi","name":"uvicorn","versionSpec":null,"scope":"extra:test"}],"advisories":[{"id":"d9a493dd-c588-40b1-bc5e-702ccda21b49","url":"https://aisecwatch.com/issues/d9a493dd-c588-40b1-bc5e-702ccda21b49","cveId":"CVE-2026-44484","title":"CVE-2026-44484: PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have…","headline":"PyTorch Lightning embedded malicious code that harvests credentials","severity":"critical","publishedAt":"2026-05-14T15:16:48.933Z","affected":["pytorch-lightning@= 2.6.2","pytorch-lightning@= 2.6.3"],"epssScore":0.00671,"matchedBy":"ecosystem"},{"id":"83deb697-4f88-4b7b-bc94-78e5c2f9f080","url":"https://aisecwatch.com/issues/83deb697-4f88-4b7b-bc94-78e5c2f9f080","cveId":"CVE-2026-31221","title":"CVE-2026-31221: PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the…","headline":"PyTorch-Lightning insecure deserialization in checkpoint loading","severity":"high","publishedAt":"2026-05-12T16:16:14.020Z","affected":["pytorch-lightning@<= 2.6.0"],"epssScore":0.00554,"matchedBy":"ecosystem"},{"id":"6ead1866-f739-49c6-a2f7-5413b9fc4a90","url":"https://aisecwatch.com/issues/6ead1866-f739-49c6-a2f7-5413b9fc4a90","cveId":"CVE-2022-0845","title":"CVE-2022-0845: Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0.","headline":"pytorch-lightning code injection in GitHub repository before 1.6.0","severity":"critical","publishedAt":"2022-03-06T03:15:07.843Z","affected":["pytorch-lightning@< 1.6.0 (fixed: 1.6.0)"],"epssScore":0.00999,"matchedBy":"ecosystem"},{"id":"2168a0ec-0812-4235-b596-afdb4765fc09","url":"https://aisecwatch.com/issues/2168a0ec-0812-4235-b596-afdb4765fc09","cveId":"CVE-2021-4118","title":"CVE-2021-4118: pytorch-lightning is vulnerable to Deserialization of Untrusted Data","headline":"pytorch-lightning deserialization of untrusted data","severity":"high","publishedAt":"2021-12-23T23:15:07.407Z","affected":["pytorch-lightning@< 1.6.0 (fixed: 1.6.0)"],"epssScore":0.00978,"matchedBy":"ecosystem"}],"checkedAt":"2026-10-09T23:20:27.389Z"},"meta":{"advisoryMatching":"by package name and ecosystem; an advisory with no ecosystem recorded for the package is matched by name alone"}}