PyPI/lightning CVE-2024-5452: critical 9.8, EPSS 26.83%
Remote code execution in pytorch lightning
Action: Upgrade lightning to 2.3.3 or later.
pip install lightning==2.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.3 | - |
Fixed versions
| 2.3.3 |
Sources
- osv: GHSA-cgwc-qvrx-rf7f
- https://nvd.nist.gov/vuln/detail/CVE-2024-5452
- https://github.com/Lightning-AI/pytorch-lightning/issues/20038
- https://github.com/lightning-ai/pytorch-lightning/commit/330af381de88cff17515418a341cbc1f9f127f9a
- https://github.com/Lightning-AI/pytorch-lightning/releases/tag/2.3.3
- https://github.com/lightning-ai/pytorch-lightning
- https://huntr.com/bounties/486add92-275e-4a7b-92f9-42d84bc759da
CVE-2024-5452 · published · modified · JSON