lightning
The Deep Learning framework to train, deploy, and ship AI products Lightning fast.
Declares an LLM dependency since 2025-10-26 (version 2.6.0.dev20251026).
Advisories
Advisories that name lightning as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.
| Advisory | Severity | Affected | Fixed in | Published |
|---|---|---|---|---|
| CVE-2026-58659CVE-2026-58659: PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the… | High | < 2.6.6 | 2.6.6 | 2026-07-15 |
| CVE-2024-5452CVE-2024-5452: A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to… | Critical | < 2.3.3 | 2.3.3 | 2024-06-06 |
Dependencies of the latest release
As declared in PyPI metadata for version 2.6.6. Optional extras are listed with their extra name.
- bitsandbytes[pytorch-extra]Hugging Face Hub / Transformers
- deepspeed[pytorch-strategies]Hugging Face Hub / Transformers
- huggingface-hub[pytorch-test]Hugging Face Hub / Transformers
- pytorch-lightningHugging Face Hub / Transformers
- torchmetricsHugging Face Hub / Transformers
- click[fabric-test]
- cloudpickle[pytorch-test]
- coverage[pytorch-test]
- fastapi[pytorch-test]
- fsspec
- hydra-core[pytorch-extra]
- ipython[pytorch-examples]
- jsonargparse[pytorch-extra]
- lightning-utilities
- litdata[data]
- matplotlib[pytorch-extra]
- numpy[pytorch-test]
- omegaconf[pytorch-extra]
- onnx[pytorch-test]
- onnx-ir[pytorch-test]
- onnxruntime[pytorch-test]
- onnxscript[pytorch-test]
- packaging
- pandas[pytorch-test]
- psutil[pytorch-test]
- pytest[pytorch-test]
- pytest-cov[pytorch-test]
- pytest-random-order[pytorch-test]
- pytest-rerunfailures[pytorch-test]
- pytest-timeout[pytorch-test]
- pyyaml
- requests[pytorch-examples]
- rich[pytorch-extra]
- scikit-learn[pytorch-test]
- tensorboard[pytorch-test]
- tensorboardx[pytorch-extra]
- tensorrt[pytorch-test-gpu]
- torch
- torch-tensorrt[pytorch-test-gpu]
- torchvision[pytorch-examples]
- tqdm
- typing-extensions
- uvicorn[pytorch-test]
Tracked packages that depend on it
Among the packages in the registry; not every dependent on PyPI.