sagemaker vulnerabilities (PyPI)
8 vulnerabilities.
-
sagemakerPyPI Missing integrity verification in Triton inference handler in Amazon SageMaker Python SDK 6.4 Medium -
sagemakerPyPI Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path 8.5 High -
sagemakerPyPI SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality 8.4 High -
sagemakerPyPI TLS disabled by default in select aws/sagemaker-python-sdk configurations 8.2 High -
sagemakerPyPI Cleartext transmission of sensitive materials in aws/sagemaker-python-sdk 8.5 High -
sagemakerPyPI MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk 5.9 Medium -
sagemakerPyPI Deserialization of Untrusted Data in sagemaker-python-sdk 7.8 High -
sagemakerPyPI Command Injection in sagemaker-python-sdk 7.8 High