Name of the Vulnerable Software and Affected Versions:

pytorch-lightning version 2.3.2

Description:

A vulnerability in `pytorch-lightning` version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the `/api/v1/state` endpoint of `LightningApp`. This issue occurs due to improper handling of unexpected state values, which results in the server shutting down.

Recommendations:

Update to a newer version of pytorch-lightning that addresses this issue. As a temporary workaround, consider restricting access to the `/api/v1/state` endpoint to minimize the risk of exploitation.