CRITICAL9.8PyPI
GHSA-cgwc-qvrx-rf7f· CVE-2024-5452, PYSEC-2026-385Remote code execution in pytorch lightning
Modified: 9/10/2026
package
PyPI/lightning
pkg:pypi/lightning
CRITICAL9.1PyPI
GHSA-mr7h-w2qc-ffc2· CVE-2024-5980, PYSEC-2026-386pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
Modified: 9/10/2026
HIGH7.8PyPI
GHSA-qqmf-gpg7-g8gw· CVE-2026-58659, PYSEC-2026-3624PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
Modified: 9/24/2026
—PyPI
MAL-2026-3201Malicious code in lightning (PyPI)
Modified: 6/8/2026
—PyPI
PYSEC-2026-3624· CVE-2026-58659, GHSA-qqmf-gpg7-g8gwModified: 9/10/2026
CRITICAL9.8PyPI
PYSEC-2026-385· CVE-2024-5452, GHSA-cgwc-qvrx-rf7fRemote code execution in pytorch lightning
Modified: 9/10/2026
CRITICAL9.1PyPI
PYSEC-2026-386· CVE-2024-5980, GHSA-mr7h-w2qc-ffc2pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint
Modified: 9/10/2026
—PyPI
PYSEC-2026-3968· CVE-2021-4118, GHSA-2vj5-px25-gjrpModified: 9/10/2026
—PyPI
PYSEC-2026-3969· CVE-2022-0845, GHSA-r5qj-cvf9-p85hModified: 9/10/2026
CRITICAL9.1PyPI
PYSEC-2026-3970· CVE-2024-8019, GHSA-4cv3-v7pv-rfhfPyTorch Lightning path traversal vulnerability
Modified: 9/10/2026
HIGH7.5PyPI
PYSEC-2026-3971· CVE-2024-8020, GHSA-98fp-7v67-4v3qPyTorch Lightning denial of service vulnerability
Modified: 9/10/2026
HIGH7.8PyPI
PYSEC-2026-3972· CVE-2026-31221, GHSA-75m9-98v2-hjpmPyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
Modified: 9/10/2026
CRITICAL9.8PyPI
PYSEC-2026-3973· CVE-2026-44484, GHSA-w37p-236h-pfx3Compromise of PyTorch Lightning PyPi Package Versions
Modified: 9/10/2026