← All advisories

High severity7.8NVD Advisory· Published Dec 23, 2021· Updated Jun 17, 2026

CVE-2021-4118

CVE-2021-4118

Description

pytorch-lightning is vulnerable to Deserialization of Untrusted Data

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
pytorch-lightningPyPI	< 1.6.0	1.6.0

Affected products

3

Lightningai/Pytorch Lightning
cpe:2.3:a:lightningai:pytorch_lightning:*:*:*:*:*:python:*:*
Range: <1.6.0
ghsa-coords
pkg:pypi/pytorch-lightning
Range: < 1.6.0
Pytorch/Pytorchlightning/pytorch Lightningv5
Range: unspecified

Patches

Vulnerability mechanics

References

8

github.com/pytorchlightning/pytorch-lightning/commit/62f1e82e032eb16565e676d39e0db0cac7e34acenvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/31832f0c-e5bb-4552-a12c-542f81f111e6nvdExploitIssue TrackingPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-2vj5-px25-gjrpghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-4118ghsaADVISORY
github.com/PyTorchLightning/pytorch-lightning/issues/11045ghsaWEB
github.com/PyTorchLightning/pytorch-lightning/pull/11099ghsaWEB
github.com/PyTorchLightning/pytorch-lightning/releases/tag/1.6.0ghsaWEB
github.com/pypa/advisory-database/tree/main/vulns/pytorch-lightning/PYSEC-2021-874.yamlghsaWEB

News mentions

0

No linked articles in our index yet.