high7.5
CVE-2024-8020
PyTorch Lightning denial of service vulnerability
Impact
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the `/api/v1/state` endpoint of `LightningApp`. This issue occurs due to improper handling of unexpected state values, which results in the server shutting down.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | pytorch-lightning | <= 2.3.2 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lightningai | Pytorch Lightning | Version 2.3.2 |