PyPI/lightning CVE-2022-0845: unknown, EPSS 1.00%
Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0.
Action: Upgrade lightning to 1.6.0 or later.
pip install lightning==1.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.0 | - |
Fixed versions
| 1.6.0 |
Sources
- osv: PYSEC-2026-3969
- https://huntr.dev/bounties/a795bf93-c91e-4c79-aae8-f7d8bda92e2a
- https://github.com/pytorchlightning/pytorch-lightning/commit/8b7a12c52e52a06408e9231647839ddb4665e8ae
- https://github.com/advisories/GHSA-r5qj-cvf9-p85h
CVE-2022-0845 · published · modified · JSON