Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: AWS SageMaker Python SDK — aws.amazon.com/security/security-bulletins/2026-004-AWS Clear all filters
TI-2026-01461 CVE-2026-1778 · GHSA-62rc-f4v9-h543

TLS disabled by default in select aws/sagemaker-python-sdk configurations

Priority LOW 35

Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made by the service when a Triton Python model is imported, incorrectly allowing for requests with invalid…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0026 Published 2026-02-02 Fixed in 3.1.1, 2.256.0 CWE-295
TI-2026-01460 CVE-2026-1777 · GHSA-rjrp-m2jw-pv9c

Cleartext transmission of sensitive materials in aws/sagemaker-python-sdk

Priority LOW 39

The Amazon SageMaker Python SDK before v3.2.0 and v2.256.0 includes the ModelBuilder HMAC signing key in the cleartext response elements of the DescribeTrainingJob function.

CVSS 4.0HIGH 8.5 Network High privileges No interaction EPSS 0.0051 Published 2026-02-02 Fixed in 3.2.0, 2.256.0 CWE-319