sagemaker
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality | sagemaker | PyPI | High | Fix reported | |
| sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data | sagemaker | PyPI | High | Fix reported | |
| sagemaker-python-sdk Command Injection vulnerability | sagemaker | PyPI | High | Fix reported | |
| Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path | sagemaker | PyPI | High | Fix reported | |
| Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler | sagemaker | PyPI | Medium | Fix reported | |
| SageMaker Python SDK has Insecure TLS Configuration | sagemaker | PyPI | High | Fix reported | |
| SageMaker Python SDK has Exposed HMAC | sagemaker | PyPI | High | Fix reported | |
| SageMaker Workflow component allows possibility of MD5 hash collisions | sagemaker | PyPI | Medium | Fix reported |