Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/sagemaker@2.256.0
purl pkg:pypi/sagemaker@2.256.0
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-9bsc-uy28-skcp Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made by the service when a Triton Python model is imported, incorrectly allowing for requests with invalid and self-signed certificates to succeed. CVE-2026-1778
GHSA-62rc-f4v9-h543
VCID-hm7p-vy71-vucv The Amazon SageMaker Python SDK before v3.2.0 and v2.256.0 includes the ModelBuilder HMAC signing key in the cleartext response elements of the DescribeTrainingJob function. A third party with permissions to both call this API and permissions to modify objects in the Training Jobs S3 output location may have the ability to upload arbitrary artifacts which are executed the next time the Training Job is invoked. CVE-2026-1777
GHSA-rjrp-m2jw-pv9c

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T15:50:16.096350+00:00 GitLab Importer Fixing VCID-9bsc-uy28-skcp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/sagemaker/CVE-2026-1778.yml 38.6.0
2026-06-12T15:50:15.666094+00:00 GitLab Importer Fixing VCID-hm7p-vy71-vucv https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/sagemaker/CVE-2026-1777.yml 38.6.0
2026-06-12T07:47:59.798522+00:00 GithubOSV Importer Fixing VCID-hm7p-vy71-vucv https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-rjrp-m2jw-pv9c/GHSA-rjrp-m2jw-pv9c.json 38.6.0
2026-06-12T07:47:43.595070+00:00 GithubOSV Importer Fixing VCID-9bsc-uy28-skcp https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-62rc-f4v9-h543/GHSA-62rc-f4v9-h543.json 38.6.0
2026-06-11T20:37:46.346977+00:00 GHSA Importer Fixing VCID-hm7p-vy71-vucv https://github.com/advisories/GHSA-rjrp-m2jw-pv9c 38.6.0
2026-06-11T20:37:46.234125+00:00 GHSA Importer Fixing VCID-9bsc-uy28-skcp https://github.com/advisories/GHSA-62rc-f4v9-h543 38.6.0