Known vulnerabilities in aws SageMaker Python SDK
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-110248 | Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMaker Python SDK V3… | 5.3 Medium | Oct 14, 2026 |
| CVE-2026-1778 | Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made… | 5.9 Medium | Feb 2, 2026 |
| CVE-2026-1777 | The Amazon SageMaker Python SDK before v3.2.0 and v2.256.0 includes the ModelBuilder HMAC signing key in the cleartext… | 7.2 High | Feb 2, 2026 |