AWS SageMaker Python SDK

• CVE-2026-110248 Medium 5.3 Insertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]py 0.5%
• CVE-2026-83551 High 7.2 Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline path 0.8%
• CVE-2026-1778 Medium 5.9 TLS disabled by default in select aws/sagemaker-python-sdk configurations 0.3%
• CVE-2026-1777 High 7.2 Cleartext transmission of sensitive materials in aws/sagemaker-python-sdk 0.5%
• CVE-2024-34072 High 7.8 Deserialization of Untrusted Data in sagemaker-python-sdk 0.4%
• CVE-2024-34073 High 7.8 Command Injection in sagemaker-python-sdk 1.2%