Safety CI > PhosphorylatedRabbits/brontes

pyup-update-pytorch-lightning-0.4.8-to-1.7.0

2 years, 11 months ago

07cc37a9

Update pytorch-lightning from 0.4.8 to 1.7.0

No dependencies with known security vulnerabilities.

pyup-update-pytorch-lightning-0.4.8-to-1.6.5

2 years, 12 months ago

983b0856

Update pytorch-lightning from 0.4.8 to 1.6.5

No dependencies with known security vulnerabilities.

pyup-update-pytorch-lightning-0.4.8-to-1.6.4

3 years, 1 month ago

7cb5b4d6

Update pytorch-lightning from 0.4.8 to 1.6.4

No dependencies with known security vulnerabilities.

pyup-update-pytorch-lightning-0.4.8-to-1.6.3

3 years, 2 months ago

432c4b36

Update pytorch-lightning from 0.4.8 to 1.6.3

No dependencies with known security vulnerabilities.

pyup-update-pytorch-lightning-0.4.8-to-1.6.2

3 years, 2 months ago

2bf108bc

Update pytorch-lightning from 0.4.8 to 1.6.2

No dependencies with known security vulnerabilities.

pyup-update-pytorch-lightning-0.4.8-to-1.6.1

3 years, 2 months ago

84cd1630

Update pytorch-lightning from 0.4.8 to 1.6.1

No dependencies with known security vulnerabilities.

pyup-update-pytorch-lightning-0.4.8-to-1.6.0

3 years, 3 months ago

323cf357

Update pytorch-lightning from 0.4.8 to 1.6.0

No dependencies with known security vulnerabilities.

pyup-update-pytorch-lightning-0.4.8-to-1.5.10

3 years, 4 months ago

a444f526

Update pytorch-lightning from 0.4.8 to 1.5.10

pytorch-lightning 1.5.10 has known security vulnerabilities.

Package	Installed	Affected	Info
pytorch-lightning	1.5.10	<1.6.0	show Pytorch-lightning 1.6.0 updates its dependency 'pyyaml' to v5.4 and uses yaml.safe_load() to fix code execution vulnerabilities.
pytorch-lightning	1.5.10	<1.6.0	show Pytorch-lightning 1.6.0 updates its dependency 'pyyaml' to v5.4 and uses yaml.safe_load() to fix code execution vulnerabilities.
pytorch-lightning	1.5.10	>=0,<1.6.0	show PyTorch Lightning version 1.5.10 and prior is vulnerable to code injection. An attacker could execute commands on the target OS running the operating system by setting the `PL_TRAINER_GPUS` when using the `Trainer` module. A [patch](https://github.com/pytorchlightning/pytorch-lightning/commit/8b7a12c52e52a06408e9231647839ddb4665e8ae) is included in the `1.6.0` release. Affected functions: pytorch_lightning.utilities.argparse.parse_env_variables
pytorch-lightning	1.5.10	>=0,<1.6.0	show Pytorch-lightning before 1.6.0 is vulnerable to Deserialization of Untrusted Data.
pytorch-lightning	1.5.10	<2.4.0	show In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the LightningApp when running on a Windows host. The vulnerability occurs at the /api/v1/upload_file/ endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to potential remote code execution (RCE) by overwriting critical files or placing malicious files in sensitive locations.
pytorch-lightning	1.5.10	<2.3.2	show A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server shutting down.

pyup-update-pytorch-lightning-0.4.8-to-1.5.9

3 years, 5 months ago

242fd60a

Update pytorch-lightning from 0.4.8 to 1.5.9

pytorch-lightning 1.5.9 has known security vulnerabilities.

Package	Installed	Affected	Info
pytorch-lightning	1.5.9	<1.6.0	show Pytorch-lightning 1.6.0 updates its dependency 'pyyaml' to v5.4 and uses yaml.safe_load() to fix code execution vulnerabilities.
pytorch-lightning	1.5.9	<1.6.0	show Pytorch-lightning 1.6.0 updates its dependency 'pyyaml' to v5.4 and uses yaml.safe_load() to fix code execution vulnerabilities.
pytorch-lightning	1.5.9	>=0,<1.6.0	show PyTorch Lightning version 1.5.10 and prior is vulnerable to code injection. An attacker could execute commands on the target OS running the operating system by setting the `PL_TRAINER_GPUS` when using the `Trainer` module. A [patch](https://github.com/pytorchlightning/pytorch-lightning/commit/8b7a12c52e52a06408e9231647839ddb4665e8ae) is included in the `1.6.0` release. Affected functions: pytorch_lightning.utilities.argparse.parse_env_variables
pytorch-lightning	1.5.9	>=0,<1.6.0	show Pytorch-lightning before 1.6.0 is vulnerable to Deserialization of Untrusted Data.
pytorch-lightning	1.5.9	<2.4.0	show In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the LightningApp when running on a Windows host. The vulnerability occurs at the /api/v1/upload_file/ endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to potential remote code execution (RCE) by overwriting critical files or placing malicious files in sensitive locations.
pytorch-lightning	1.5.9	<2.3.2	show A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server shutting down.

pyup-update-pytorch-lightning-0.4.8-to-1.5.8

3 years, 6 months ago

7f7f4935

Update pytorch-lightning from 0.4.8 to 1.5.8

pytorch-lightning 1.5.8 has known security vulnerabilities.

Package	Installed	Affected	Info
pytorch-lightning	1.5.8	<1.6.0	show Pytorch-lightning 1.6.0 updates its dependency 'pyyaml' to v5.4 and uses yaml.safe_load() to fix code execution vulnerabilities.
pytorch-lightning	1.5.8	<1.6.0	show Pytorch-lightning 1.6.0 updates its dependency 'pyyaml' to v5.4 and uses yaml.safe_load() to fix code execution vulnerabilities.
pytorch-lightning	1.5.8	>=0,<1.6.0	show PyTorch Lightning version 1.5.10 and prior is vulnerable to code injection. An attacker could execute commands on the target OS running the operating system by setting the `PL_TRAINER_GPUS` when using the `Trainer` module. A [patch](https://github.com/pytorchlightning/pytorch-lightning/commit/8b7a12c52e52a06408e9231647839ddb4665e8ae) is included in the `1.6.0` release. Affected functions: pytorch_lightning.utilities.argparse.parse_env_variables
pytorch-lightning	1.5.8	>=0,<1.6.0	show Pytorch-lightning before 1.6.0 is vulnerable to Deserialization of Untrusted Data.
pytorch-lightning	1.5.8	<2.4.0	show In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the LightningApp when running on a Windows host. The vulnerability occurs at the /api/v1/upload_file/ endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to potential remote code execution (RCE) by overwriting critical files or placing malicious files in sensitive locations.
pytorch-lightning	1.5.8	<2.3.2	show A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server shutting down.

pyup-update-pytorch-lightning-0.4.8-to-1.5.7

3 years, 6 months ago

31c7a5bc

Update pytorch-lightning from 0.4.8 to 1.5.7

No dependencies with known security vulnerabilities.

pyup-update-pytorch-lightning-0.4.8-to-1.5.6

3 years, 6 months ago

0f2c1ce2

Update pytorch-lightning from 0.4.8 to 1.5.6

No dependencies with known security vulnerabilities.

pyup-update-pytorch-lightning-0.4.8-to-1.5.5

3 years, 7 months ago

3c8a6de2

Update pytorch-lightning from 0.4.8 to 1.5.5

No dependencies with known security vulnerabilities.

pyup-update-pytorch-lightning-0.4.8-to-1.5.4

3 years, 7 months ago

1ab2b73b

Update pytorch-lightning from 0.4.8 to 1.5.4

No dependencies with known security vulnerabilities.

pyup-update-pytorch-lightning-0.4.8-to-1.5.3

3 years, 7 months ago

ef5a1c9d

Update pytorch-lightning from 0.4.8 to 1.5.3

No dependencies with known security vulnerabilities.