hydro-integrations (2.3.0.dev0) potentially affected by CVE-2026-1778 via sagemaker (1.52.1)

sagemaker PYPI version 1.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - hydro-integrations 2.3.0.dev0 Source cves: CVE-2026-1778 Source advisory: OSV:PYSEC-2026-1886...

CVE-2026-1778

creationtimestamp| type| source ---|---|--- 2026-02-03 09:50:05+00:00| seen| https://gist.github.com/alon710/489aeb55e21e4d9cedb91bf1a9640a8b...

amzn-nova-customization-sdk (>=1.0.29, <=1.0.83), anymodality (0.1.0) +29 more potentially affected by CVE-2026-1778 via sagemaker (>=2.16.1, <=2.254.1)

sagemaker PYPI version =2.16.1, =1.0.29, =0.1.1b20230324, =0.4.6, =0.1.17, =0.1.0, =0.1.1, =0.9.0, =1.0.0, =1.97.0.dev0, =2.0.0, =1.0.0, =1.0.0, =0.4.0, =0.1.2, =0.4.9 and more Source cves: CVE-2026-1778 Source advisory: OSV:GHSA-62RC-F4V9-H543...

hydro-integrations (2.3.0.dev0) potentially affected by CVE-2026-1778 via sagemaker (1.52.1)

sagemaker PYPI version 1.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - hydro-integrations 2.3.0.dev0 Source cves: CVE-2026-1778 Source advisory: OSV:GHSA-62RC-F4V9-H543...

amzn-nova-customization-sdk (>=1.0.29, <=1.0.83), anymodality (0.1.0) +30 more potentially affected by CVE-2026-1778 via sagemaker (>=1.52.1, <=2.254.1)

sagemaker PYPI version =1.52.1, =1.0.29, =0.1.1b20230324, =0.4.6, =0.1.17, =0.1.0, =0.1.1, =0.9.0, =0.2.8, =1.97.0.dev0, =2.0.0, =1.0.0, =1.0.0, =0.4.0, =0.1.2, =0.4.9 and more Source cves: CVE-2026-1778 Source advisory: MEND:CVE-2026-1778...

CVE-2026-1778 TLS disabled by default in select aws/sagemaker-python-sdk configurations

Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made by the service when a Triton Python model is imported, incorrectly allowing for requests with invalid and self-signed certificates to succeed...