GHSA-rjrp-m2jw-pv9c
High · 7.2CVSS
7.2
EPSS
—
Published
Feb 2, 2026
CISA due date
—
The record
SageMaker Python SDK has Exposed HMAC
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | sagemaker | 0 | 2.256.0 |
| PyPI | sagemaker | 3.0 | 3.2.0 |
Related vulnerabilities
- CVE-2026-1777 The Amazon SageMaker Python SDK before v3.2.0 and v2.256.0 includes the ModelBuilder HMAC… Same vulnerability
- GHSA-5r2p-pjr8-7fh7 SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality Also affects sagemaker
- GHSA-62rc-f4v9-h543 SageMaker Python SDK has Insecure TLS Configuration Also affects sagemaker
- CVE-2026-1778 Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate… Also affects sagemaker
- CVE-2025-0508 A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows… Also affects sagemaker
- CVE-2024-34072 sagemaker-python-sdk is a library for training and deploying machine learning models on… Also affects sagemaker
- CVE-2024-34073 sagemaker-python-sdk is a library for training and deploying machine learning models on… Also affects sagemaker
- CVE-2026-105777 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before… CWE-201