Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

lightning-ai/lightning

              master @ 9fed5c2
            

Fixes

CVEs

CRITICAL

Peak severity

33.3%

Coverage

Highlights

Code Injection: 1 prior fix. Scrutinize any change in this area.

src/lightning/pytorch/trainer/connectors/signal_connector.py: most-fixed (2 issues). Treat as high-risk during review.

5 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Code Injection: Arbitrary code execution via the `_instantiator` hyperparameter in checkpoints; allowlist added to restrict import paths.

Insecure Deserialization: PyYAML UnsafeLoader allowed RCE; fixed by switching to safe full_load (CVE-2020-1747, CVE-2020-14343).

Deserialization: torch.load without weights_only enabled RCE; now defaults to True.