Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: AWS Amazon SageMaker Python SDK — aws.amazon.com/security/security-bulletins/2026-031-aws Clear all filters
TI-2026-07555 CVE-2026-8597 · GHSA-rq6v-x3j8-7qgf

Missing integrity verification in Triton inference handler in Amazon SageMaker Python SDK

Priority LOW 31

Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to achieve code execution in inference contai…

CVSS 4.0MEDIUM 6.4 Network High privileges No interaction EPSS 0.00507 Published 2026-05-14 Fixed in 2.257.2, 3.8.0 CWE-354
TI-2026-07554 CVE-2026-8596 · GHSA-7hh5-prp2-mfh5

Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path

Priority MEDIUM 40

Cleartext storage of sensitive information in the ModelBuilder/Serve component in Amazon SageMaker Python SDK before v2.257.2 and v3 before v3.8.0 might allow a remote authenticated actor to extract the HMAC signing key…

CVSS 4.0HIGH 8.5 Network High privileges No interaction EPSS 0.00607 Published 2026-05-14 Fixed in 2.257.2, 3.8.0 CWE-312