Loading
Open source library for training and deploying models on Amazon SageMaker.
Declares an LLM dependency since 2024-07-10 (version 2.225.0).
Advisories that name sagemaker as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.
| Advisory | Severity | Affected | Fixed in | Published |
|---|---|---|---|---|
| CVE-2026-8596GHSA-7hh5-prp2-mfh5: Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path | High | >= 3.0.0, <= 3.7.1 | 3.8.0 | 2026-05-21 |
As declared in PyPI metadata for version 3.24.0. Optional extras are listed with their extra name.
Among the packages in the registry; not every dependent on PyPI.