PyPI/pytorch-lightning CVE-2022-0845: critical 9.8, EPSS 1.01%

Code Injection in PyTorch Lightning

Action: Upgrade pytorch-lightning to 1.6.0 or later.

pip install pytorch-lightning==1.6.0

Affected

Fixed versions

Sources

• osv: GHSA-r5qj-cvf9-p85h
• https://nvd.nist.gov/vuln/detail/CVE-2022-0845
• https://github.com/PyTorchLightning/pytorch-lightning/pull/12212
• https://github.com/pytorchlightning/pytorch-lightning/commit/8b7a12c52e52a06408e9231647839ddb4665e8ae
• https://github.com/advisories/GHSA-r5qj-cvf9-p85h
• https://github.com/pypa/advisory-database/tree/main/vulns/pytorch-lightning/PYSEC-2022-181.yaml
• https://github.com/pytorchlightning/pytorch-lightning
• https://huntr.dev/bounties/a795bf93-c91e-4c79-aae8-f7d8bda92e2a

CVE-2022-0845 · published 2022-03-06T00:00:16Z · modified 2026-09-10T17:26:06.105487760Z · JSON