lightning-ai/pytorch-lightning
0 remedies
cpe:2.3:a:lightningai:pytorch_lightning:*:*:*:*:python:*:*, +1 more
0 remedies
- 2.3.2
Lightning AI PyTorch Lightning Denial-of-Service Vulnerability
Vulnerability
A denial-of-service vulnerability has been identified in Lightning AI PyTorch Lightning version 2.3.2. The issue arises when an attacker sends an unexpected POST request to the '/api/v1/state' endpoint of 'LightningApp'. This vulnerability is caused by improper management of unexpected state values, leading to a server shutdown.
Impact
Exploitation of this vulnerability causes the server to shut down, leading to a denial-of-service condition.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
6.6impact
2.5exploitability
6.0remediation
0.0relevance
0.0threat
6.4urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.