{"action":"Upgrade pytorch-lightning to 1.6.0 or later.","affected":[{"fixed":"1.6.0","introduced":"0"}],"component":"pytorch-lightning","cve_ids":["CVE-2022-0845"],"ecosystem":"PyPI","epss":0.00999,"exploited":false,"fixed_versions":["1.6.0"],"ghsa_id":"GHSA-r5qj-cvf9-p85h","id":"tcs_01M5KGGC8BG1N6N5YC838N5J6G","modified_at":"2026-09-10T17:26:06.105487760Z","published_at":"2022-03-05T22:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-181","https://huntr.dev/bounties/a795bf93-c91e-4c79-aae8-f7d8bda92e2a","https://github.com/pytorchlightning/pytorch-lightning/commit/8b7a12c52e52a06408e9231647839ddb4665e8ae","https://github.com/advisories/GHSA-r5qj-cvf9-p85h"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-181","url":"https://osv.dev/vulnerability/PYSEC-2022-181"}],"summary":"Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0."}