GHSA-62rc-f4v9-h543
Medium · 5.9CVSS
5.9
EPSS
—
Published
Feb 2, 2026
CISA due date
—
The record
SageMaker Python SDK has Insecure TLS Configuration
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | sagemaker | 0 | 2.256.0 |
| PyPI | sagemaker | 3.0 | 3.1.1 |
Related vulnerabilities
- CVE-2026-1778 Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate… Same vulnerability
- GHSA-5r2p-pjr8-7fh7 SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality Also affects sagemaker
- GHSA-rjrp-m2jw-pv9c SageMaker Python SDK has Exposed HMAC Also affects sagemaker
- CVE-2026-1777 The Amazon SageMaker Python SDK before v3.2.0 and v2.256.0 includes the ModelBuilder HMAC… Also affects sagemaker
- CVE-2025-0508 A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows… Also affects sagemaker
- CVE-2024-34072 sagemaker-python-sdk is a library for training and deploying machine learning models on… Also affects sagemaker
- CVE-2024-34073 sagemaker-python-sdk is a library for training and deploying machine learning models on… Also affects sagemaker
- CVE-2026-96375 Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the… CWE-295