Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2022-0845

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-r5qj-cvf9-p85h

Code Injection in PyTorch Lightning PyTorch Lightning version 1.5.10 and prior is vulnerable to code injection. An attacker could execute commands on the target OS running the operating system by setting the `PL_TRAINER_GPUS` when using the `Trainer` module. A patch https://github.com/pytorchlightning/pytorch-lightning/commit/8b7a12c52e52a06408e9231647839ddb4665e8ae is included in the `1.6.0` release.

gitlab/pypi/pytorch-lightning/CVE-2022-0845

Code Injection in PyTorch Lightning PyTorch Lightning version 1.5.10 and prior is vulnerable to code injection. An attacker could execute commands on the target OS running the operating system by setting the `PL_TRAINER_GPUS` when using the `Trainer` module. A patch https://github.com/pytorchlightning/pytorch-lightning/commit/8b7a12c52e52a06408e9231647839ddb4665e8ae is included in the `1.6.0` release.

pypa/pytorch-lightning/PYSEC-2022-181

Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0.

pysec/PYSEC-2022-181

Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0.