sagemaker vulnerabilities
CVEs whose affected-version data names the sagemaker package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
6 CVEsRSS
GHSA-5r2p-pjr8-7fh7HighSageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality
SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality
▾ Twilightsagemaker · sagemakervia OSV
CVE-2026-1777High· 7.2SageMaker Python SDK has Exposed HMAC
SageMaker Python SDK has Exposed HMAC
▾ Twilightsagemaker · sagemakerEPSS 0.52%via OSV
CVE-2026-1778Medium· 5.9SageMaker Python SDK has Insecure TLS Configuration
SageMaker Python SDK has Insecure TLS Configuration
▾ Sunlitsagemaker · sagemakerEPSS 0.26%via OSV
CVE-2025-0508Medium· 5.9SageMaker Workflow component allows possibility of MD5 hash collisions
SageMaker Workflow component allows possibility of MD5 hash collisions
▾ Sunlitsagemaker · sagemakerEPSS 0.27%via OSV
CVE-2024-34072High· 7.8sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data
sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data
▾ Twilightsagemaker · sagemakerEPSS 0.41%via OSV
CVE-2024-34073High· 7.8sagemaker-python-sdk Command Injection vulnerability
sagemaker-python-sdk Command Injection vulnerability
▾ Twilightsagemaker · sagemakerEPSS 1.2%via OSV