{"action":"Upgrade lightning to 1.6.0 or later.","affected":[{"fixed":"1.6.0","introduced":"0"}],"component":"lightning","cve_ids":["CVE-2022-0845"],"ecosystem":"PyPI","epss":0.01008,"exploited":false,"fixed_versions":["1.6.0"],"ghsa_id":"GHSA-r5qj-cvf9-p85h","id":"tcs_01M5KH8ZZ9WHMV5W7M8VVH57TM","modified_at":"2026-09-10T17:26:06.105487760Z","published_at":"2026-09-10T16:42:38.429529Z","references":["https://osv.dev/vulnerability/PYSEC-2026-3969","https://huntr.dev/bounties/a795bf93-c91e-4c79-aae8-f7d8bda92e2a","https://github.com/pytorchlightning/pytorch-lightning/commit/8b7a12c52e52a06408e9231647839ddb4665e8ae","https://github.com/advisories/GHSA-r5qj-cvf9-p85h"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-3969","url":"https://osv.dev/vulnerability/PYSEC-2026-3969"}],"summary":"Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0."}