Changes in 2.6.6
PyTorch Lightning
Fixed
-
Fixed arbitrary code execution in
load_from_checkpointby restricting the_instantiatorhyperparameter to an allowlist of trusted instantiators (#21832) -
Fixed arbitrary code execution in
load_from_checkpointby rejecting a checkpoint_class_paththat does not resolve to an already imported subclass of the loaded class (#21914)
Full commit list: 2.6.5 -> 2.6.6
Contributors
We thank all folks who submitted issues, features, fixes and doc changes. It's the only way we can collectively make Lightning ⚡ better for everyone, nice job!
In particular, we would like to thank the authors and co-authors of the pull-requests above: