Lightning 2.6.6

Changes in 2.6.6

PyTorch Lightning

Fixed

• Fixed arbitrary code execution in load_from_checkpoint by restricting the _instantiator hyperparameter to an allowlist of trusted instantiators (#21832)

• Fixed arbitrary code execution in load_from_checkpoint by rejecting a checkpoint _class_path that does not resolve to an already imported subclass of the loaded class (#21914)

Full commit list: 2.6.5 -> 2.6.6

Contributors

We thank all folks who submitted issues, features, fixes and doc changes. It's the only way we can collectively make Lightning ⚡ better for everyone, nice job!

In particular, we would like to thank the authors and co-authors of the pull-requests above:

@addyCooks @bhimrazy