{"data":{"ecosystem":"pypi","name":"sagemaker","url":"https://aisecwatch.com/packages/pypi/sagemaker","latestVersion":"3.24.0","firstReleaseAt":"2017-11-30T06:11:50.430Z","repository":"https://github.com/aws/sagemaker-python-sdk","llm":{"exposure":"direct","depth":0,"integratedAt":"2024-07-10T01:27:04.233Z","integratedVersion":"2.225.0","sdks":[],"path":[]},"authority":{"profile":[],"fromDependencies":[]},"dependencies":[{"ecosystem":"pypi","name":"sagemaker-train","versionSpec":"<2.0.0,>=1.24.0","scope":"runtime"},{"ecosystem":"pypi","name":"sagemaker-mlops","versionSpec":"<2.0.0,>=1.24.0","scope":"runtime"},{"ecosystem":"pypi","name":"sagemaker-serve","versionSpec":"<2.0.0,>=1.24.0","scope":"runtime"},{"ecosystem":"pypi","name":"sagemaker-core","versionSpec":"<3.0.0,>=2.24.0","scope":"runtime"}],"advisories":[{"id":"546df6f3-744c-4f4f-a711-9824888ffa29","url":"https://aisecwatch.com/issues/546df6f3-744c-4f4f-a711-9824888ffa29","cveId":"CVE-2026-8596","title":"GHSA-7hh5-prp2-mfh5: Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path","headline":null,"severity":"high","publishedAt":"2026-05-21T17:42:40.000Z","affected":["sagemaker@>= 3.0.0, <= 3.7.1 (fixed: 3.8.0)","sagemaker@>= 2.199.0, <= 2.257.1 (fixed: 2.257.2)"],"epssScore":0.00802},{"id":"49e8267f-5509-4434-863d-c141ff0a0fbb","url":"https://aisecwatch.com/issues/49e8267f-5509-4434-863d-c141ff0a0fbb","cveId":"CVE-2026-8597","title":"CVE-2026-8597: Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before v2.257.2 and v3…","headline":"Amazon SageMaker Python SDK code execution via pickle model artifacts in S3","severity":"high","publishedAt":"2026-05-14T20:17:21.340Z","affected":["sagemaker@>= 2.199.0, <= 2.257.1 (fixed: 2.257.2)","sagemaker@>= 3.0.0, <= 3.7.1 (fixed: 3.8.0)"],"epssScore":0.00615},{"id":"81a12dfb-b873-475c-87b3-a78de1b2de02","url":"https://aisecwatch.com/issues/81a12dfb-b873-475c-87b3-a78de1b2de02","cveId":"CVE-2026-1778","title":"CVE-2026-1778: Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made…","headline":"Amazon SageMaker Python SDK TLS certificate verification disabled","severity":"medium","publishedAt":"2026-02-03T04:16:04.283Z","affected":["sagemaker@>= 3.0, < 3.1.1 (fixed: 3.1.1)","sagemaker@< 2.256.0 (fixed: 2.256.0)"],"epssScore":0.00264},{"id":"ec7b0056-6507-41b2-93e2-e4d055e0106b","url":"https://aisecwatch.com/issues/ec7b0056-6507-41b2-93e2-e4d055e0106b","cveId":"CVE-2024-34073","title":"CVE-2024-34073: sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. In affected…","headline":"sagemaker-python-sdk OS command injection via capture_dependencies","severity":"high","publishedAt":"2024-05-03T11:15:22.447Z","affected":["sagemaker@< 2.214.3 (fixed: 2.214.3)"],"epssScore":0.01153},{"id":"3aae84ee-bd1a-435d-8dfd-e31ab6993b3a","url":"https://aisecwatch.com/issues/3aae84ee-bd1a-435d-8dfd-e31ab6993b3a","cveId":"CVE-2024-34072","title":"CVE-2024-34072: sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. The…","headline":"sagemaker-python-sdk unsafe deserialization of pickled numpy object arrays","severity":"high","publishedAt":"2024-05-03T11:15:22.260Z","affected":["sagemaker@< 2.218.0 (fixed: 2.218.0)"],"epssScore":0.00411}],"checkedAt":"2026-10-09T22:21:42.065Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}