Skip to content
OpenAdvisories

Package · PyPI

sagemaker

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-1778

    TLS disabled by default in select aws/sagemaker-python-sdk configurations

    Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made by the service when a Triton Python model is imported, incorrectly allowing for requests with invalid and self-signed certificates to succee…

    AWS SageMaker Python SDK sagemaker PyPI
  • Medium 5.9
    CVE-2025-0508

    MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk

    A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configuration…

    AWS aws/sagemaker-python-sdk sagemaker PyPI