Amazon Sagemaker Python Sdk (Aws) - vulnerabilities (CVEs)

3 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-21. Vendor: Aws.

CVEs of Amazon Sagemaker Python Sdk

• CVE-2026-112408 - CVSS 9.4 (critical), 2026-10-21: Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before…
• CVE-2026-8596 - CVSS 8.5 (high), 2026-05-14: Cleartext storage of sensitive information in the ModelBuilder/Serve component in Amazon SageMaker Python SDK before v2.257.2 and v3 before v3.8.0 might allow…
• CVE-2026-8597 - CVSS 7.2 (high), 2026-05-14: Missing integrity verification in the Triton inference handler in Amazon SageMaker Python SDK v2 before v2.257.2 and v3 before v3.8.0 might allow a remote…