repository icon
aws / sagemaker-python-sdk Project repository

A library for training and deploying machine learning models on Amazon SageMaker

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN3 DAYS

FIX

WITHINN/A DAYS

SSRF via Unvalidated Training Recipe URL in sm_recipes
galanzi2580-wq
self closed
Docker Command Injection via String Concatenation in Spark History Server
galanzi2580-wq
self closed
Insecure Deserialization of Remote Function Job Results via SHA-256 Hash Bypass...
galanzi2580-wq
self closed
Command injection in SageMaker V3 training environment generation via unescaped...
shyam21112
duplicate
Critical
Zip Slip Path Traversal via shutil.unpack_archive in Workspace Extraction
snakeyworm
duplicate
High
Shell Injection via Hyperparameter Values in Training Container Environment Setu...
snakeyworm
duplicate
High
Arbitrary system library overwrite via model artifact shared_libs directory copi...
snakeyworm
pending
RCE via cloudpickle deserialization with bypassable SHA-256 integrity check — ha...
snakeyworm
pending
Code injection via unsanitized model_path in Python subprocess -c argument acros...
snakeyworm
pending
Insecure Deserialization and Integrity Check Bypass in sagemaker-serve leading t...
yutubeboss575-create
pending
Shell command injection via unescaped source_code.command in ModelTrainer traini...
wormysnake
pending
Arbitrary file write via path traversal in S3 download functions allows overwrit...
wormysnake
pending
TarSlip Path Traversal via CWD/extract_path Mismatch in sagemaker-core _get_safe...
ryan-fanpierlabs-security-finder
pending
SQL injection via unsanitized event_time_feature_name in get_feature_group_as_d...
wormysnake
pending
Insecure Deserialization leading to Arbitrary Code Execution
z3r0s6
pending
Remote function integrity check bypass -> RCE via cloudpickle deserialization
vitocrl
duplicate
High
Insecure Deserialization in Remote Functions leading to Remote Code Execution (R...
01223079246
duplicate
Critical
Arbitrary class loading via _get_class_from_name in SageMaker Serve — MODEL_CLAS...
kodareef5
self closed
Shell injection via unescaped hyperparameter values in training container enviro...
kaushalvsheth
duplicate
High
AWS Credentials Exposed in Docker Command Line via --env Flags Visible to All Lo...
nhomyk
pending
Docker Argument Injection via Image URI — Attacker-Controlled Image Name Injects...
nhomyk
pending
Path Traversal via Unvalidated S3 Object Keys in _download_files_under_prefix Al...
nhomyk
pending
World-writable permissions (chmod 777) on job output directories in shared envir...
nhomyk
pending
RCE via cloudpickle.loads() in remote function results and model serving from S3
nhomyk
pending
System Library Overwrite via Unvalidated Model Artifact shared_libs Directory in...
den-sec
pending
Integrity Check Bypass via Keyless SHA256 in Remote Function Serialization Enabl...
den-sec
duplicate
High
RCE via unsafe cloudpickle.load in model serving inference handlers
hhhashexe
pending
RCE via cloudpickle.load() on attacker-controlled model artifact in aws/sagemake...
theoddesseyp-ai
pending
RCE via cloudpickle.load without integrity check in Triton model server
eistee82
pending
Zip Slip path traversal via unsafe shutil.unpack_archive() in workspace extracti...
elucidator-hky
self closed
Arbitrary code execution via unsafe cloudpickle.load() in multiple SageMaker mod...
elucidator-hky
self closed
Remote Code Execution (RCE) via Insecure Deserialization in cloudpickle.load
whitewolf8888
pending
Unsafe deserialization via pickle in SageMaker SDK model serialization
etwithin
pending
Path Traversal via Malicious S3 Object Keys in _download_files_under_prefix() an...
s3zer0
pending
Path Traversal in S3 Artifact Download via Unsanitized os.path.relpath() Allows...
p0her
duplicate
Medium
Unauthenticated RCE via cloudpickle.load() on Attacker-Controlled serve.pkl Mode...
zeroxjacks
pending
OS Argument Injection in SageMaker Local Mode via Crafted ECR Image URI Passed t...
zeroxjacks
pending
Remote Code Execution in SageMaker Serve Inference Handler via Unsanitized pip...
zeroxjacks
pending
AWS Credential Theft via SSRF through SAGEMAKER_ENDPOINT Environment Variable in...
pavanchow
pending
Command Injection via Python String Interpolation in capture_dependencies() in d...
pavanchow
pending
Improper SSH Host Key Validation in CustomHostKeyPolicy Enables Machine-in-the-M...
kimchikingdom
pending
Remote Code Execution (RCE) via Integrity Check Bypass and Unsafe Cloudpickle De...
unicuervo16
duplicate
Critical
Security Regression: HMAC Removed from Remote Function Integrity Check Enables R...
mertsatilmaz
pending
Arbitrary Code Execution via Malicious Shared Library Injection from Model Artif...
optimus-fulcria
duplicate
High
Unsanitized `job_conda_env` Parameter Injected into `shlex.split()` Command Stri...
soze-ki
duplicate
Critical