LI
Vendor
Lightningai
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-58659 | PL Pytorch Lightning Lightningai | 7.8 | Jul 15 | PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameter |
| CVE-2026-44484 | PL Pytorch Lightning Lightningai | 9.8 | May 14 | Compromise of PyTorch Lightning PyPi Package Versions |
| CVE-2026-31221 | PL Pytorch Lightning Lightningai | 7.8 | May 12 | PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism |
| CVE-2024-8020 | PL Pytorch Lightning Lightningai | 7.5 | Mar 20 | Denial of Service in lightning-ai/pytorch-lightning |
| CVE-2024-8019 | PL Pytorch Lightning Lightningai | 9.1 | Mar 20 | Arbitrary File Write/Overwrite in lightning-ai/pytorch-lightning |
| CVE-2024-5980 | PL Pytorch Lightning Lightningai | 9.8 | Jun 27 | Arbitrary File Write via /v1/runs API endpoint in lightning-ai/pytorch-lightning |
| CVE-2024-5452 | PL Pytorch Lightning Lightningai | 9.8 | Jun 6 | RCE via Property/Class Pollution in lightning-ai/pytorch-lightning |
| CVE-2022-0845 | PL Pytorch Lightning Lightningai | 9.8 | Mar 5 | Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0 |
| CVE-2021-4118 | PL Pytorch Lightning Lightningai | 7.8 | Dec 23 | pytorch-lightning is vulnerable to Deserialization of Untrusted Data |
