MEDIUM5.9PyPI
PYSEC-2026-1885· CVE-2025-0508, GHSA-32g6-mg92-ghm2SageMaker Workflow component allows possibility of MD5 hash collisions
Modified: 7/7/2026
package
PyPI/sagemaker
pkg:pypi/sagemaker
MEDIUM5.9PyPI
PYSEC-2026-1886· CVE-2026-1778, GHSA-62rc-f4v9-h543SageMaker Python SDK has Insecure TLS Configuration
Modified: 7/7/2026
HIGH7.8PyPI
PYSEC-2026-1887· CVE-2024-34073, GHSA-7pc3-pr3q-58vgsagemaker-python-sdk Command Injection vulnerability
Modified: 7/7/2026
HIGH7.2PyPI
PYSEC-2026-1888· CVE-2026-1777, GHSA-rjrp-m2jw-pv9cSageMaker Python SDK has Exposed HMAC
Modified: 7/7/2026
HIGH7.8PyPI
PYSEC-2026-1889· CVE-2024-34072, GHSA-wjvx-jhpj-r54rsagemaker-python-sdk vulnerable to Deserialization of Untrusted Data
Modified: 7/7/2026
HIGH7.2PyPI
PYSEC-2026-3059· CVE-2026-8596, GHSA-7hh5-prp2-mfh5Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path
Modified: 7/13/2026
HIGH7.2PyPI
PYSEC-2026-3060· CVE-2026-8597, GHSA-rq6v-x3j8-7qgfAmazon SageMaker Python SDK is missing integrity verification in its Triton inference handler
Modified: 7/13/2026
MEDIUM5.9PyPI
GHSA-32g6-mg92-ghm2· CVE-2025-0508, PYSEC-2026-1885SageMaker Workflow component allows possibility of MD5 hash collisions
Modified: 7/7/2026
HIGHPyPI
GHSA-5r2p-pjr8-7fh7SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality
Modified: 9/10/2026
MEDIUM5.9PyPI
GHSA-62rc-f4v9-h543· CVE-2026-1778, PYSEC-2026-1886SageMaker Python SDK has Insecure TLS Configuration
Modified: 7/7/2026
HIGH7.2PyPI
GHSA-7hh5-prp2-mfh5· CVE-2026-8596, PYSEC-2026-3059Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path
Modified: 7/13/2026
HIGH7.8PyPI
GHSA-7pc3-pr3q-58vg· CVE-2024-34073, PYSEC-2026-1887sagemaker-python-sdk Command Injection vulnerability
Modified: 9/10/2026
HIGH7.2PyPI
GHSA-rjrp-m2jw-pv9c· CVE-2026-1777, PYSEC-2026-1888SageMaker Python SDK has Exposed HMAC
Modified: 7/7/2026
HIGH7.2PyPI
GHSA-rq6v-x3j8-7qgf· CVE-2026-8597, PYSEC-2026-3060Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler
Modified: 7/13/2026
HIGH7.8PyPI
GHSA-wjvx-jhpj-r54r· CVE-2024-34072, PYSEC-2026-1889sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data
Modified: 9/10/2026