← All advisories

High severityNVD Advisory· Published Dec 23, 2021· Updated Aug 3, 2024

Deserialization of Untrusted Data in pytorchlightning/pytorch-lightning

CVE-2021-4118

Description

pytorch-lightning is vulnerable to Deserialization of Untrusted Data

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
pytorch-lightningPyPI	< 1.6.0	1.6.0

Affected products

2

ghsa-coords
pkg:pypi/pytorch-lightning
Range: < 1.6.0
Pytorch/Pytorchlightning/pytorch Lightningv5
Range: unspecified

Patches

Vulnerability mechanics

References

8

github.com/advisories/GHSA-2vj5-px25-gjrpghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-4118ghsaADVISORY
github.com/PyTorchLightning/pytorch-lightning/issues/11045ghsaWEB
github.com/PyTorchLightning/pytorch-lightning/pull/11099ghsaWEB
github.com/PyTorchLightning/pytorch-lightning/releases/tag/1.6.0ghsaWEB
github.com/pypa/advisory-database/tree/main/vulns/pytorch-lightning/PYSEC-2021-874.yamlghsaWEB
github.com/pytorchlightning/pytorch-lightning/commit/62f1e82e032eb16565e676d39e0db0cac7e34aceghsax_refsource_MISCWEB
huntr.dev/bounties/31832f0c-e5bb-4552-a12c-542f81f111e6ghsax_refsource_CONFIRMWEB

News mentions

0

No linked articles in our index yet.