Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
sagemaker SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality High Risk 8.0 7 months ago 6 hours ago
github.com/aws/aws-sdk-go-v2/service/sagemakerruntime Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder Medium Risk 5.9 5 months ago 20 days ago
github.com/aws/aws-sdk-go-v2/service/sagemakerruntime DoS due to Panic in AWS SDK for Go v2 SDK EventStream Decoder in github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream Unknown 2 months ago 20 days ago
aws-sdk-sagemaker AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 8 months ago 22 days ago
aws-sdk-sagemakera2iruntime AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 8 months ago 22 days ago
aws-sdk-sagemakeredge AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 8 months ago 22 days ago
aws-sdk-sagemakerfeaturestoreruntime AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 8 months ago 22 days ago
aws-sdk-sagemakergeospatial AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 8 months ago 22 days ago
aws-sdk-sagemakermetrics AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 8 months ago 22 days ago
aws-sdk-sagemakerruntime AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value Low Risk 3.7 8 months ago 22 days ago
sagemaker sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data High Risk 7.8 2 years ago 22 days ago
sagemaker sagemaker-python-sdk Command Injection vulnerability High Risk 7.8 2 years ago 22 days ago
sagemaker Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path High Risk 7.2 4 months ago 2 months ago
sagemaker Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler High Risk 7.2 4 months ago 2 months ago
sagemaker Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path High Risk 7.2 2 months ago 2 months ago
sagemaker Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler High Risk 7.2 2 months ago 2 months ago
sagemaker SageMaker Python SDK has Insecure TLS Configuration Medium Risk 5.9 8 months ago 2 months ago
sagemaker SageMaker Python SDK has Exposed HMAC High Risk 7.2 8 months ago 2 months ago
sagemaker SageMaker Workflow component allows possibility of MD5 hash collisions Medium Risk 5.9 1 year ago 2 months ago
sagemaker SageMaker Python SDK has Exposed HMAC High Risk 7.2 2 months ago 2 months ago
sagemaker sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data High Risk 7.8 2 months ago 2 months ago
sagemaker sagemaker-python-sdk Command Injection vulnerability High Risk 7.8 2 months ago 2 months ago
sagemaker SageMaker Workflow component allows possibility of MD5 hash collisions Medium Risk 5.9 2 months ago 2 months ago
sagemaker SageMaker Python SDK has Insecure TLS Configuration Medium Risk 5.9 2 months ago 2 months ago
cdk-sagemaker-notebook-workflow Malicious code in cdk-sagemaker-notebook-workflow (npm) Unknown 4 months ago 4 months ago
amzn-sagemaker-studio Malicious code in amzn-sagemaker-studio (PyPI) Unknown 1 year ago 10 months ago
sagemaker-forked-extensions Malicious code in sagemaker-forked-extensions (npm) Unknown 1 year ago 1 year ago
sagemaker_examples Malicious code in sagemaker_examples (npm) Unknown 1 year ago 1 year ago
sagemaker_notebooks_extension Malicious code in sagemaker_notebooks_extension (npm) Unknown 1 year ago 1 year ago
sagemaker_session_manager Malicious code in sagemaker_session_manager (npm) Unknown 1 year ago 1 year ago
sagemaker_sharing_extension Malicious code in sagemaker_sharing_extension (npm) Unknown 1 year ago 1 year ago
sagemaker-training AWS SageMaker Training Toolkit logs CodeArtifact Authorization token Medium Risk 4.2 2 years ago 1 year ago
sagemakertransformers Malicious code in sagemakertransformers (PyPI) Unknown 3 years ago 3 years ago