6 matches found
anymodality (0.1.0), autogluon-cloud (>=0.1.1b20230324, <=0.2.1b20230929) +21 more potentially affected by CVE-2024-34072 via sagemaker (>=2.16.1, <=2.207.1)
sagemaker PYPI version =2.16.1, =0.1.1b20230324, =0.1.17, =0.9.0, =1.0.0, =1.97.0.dev0, =1.0.0, =1.0.0, =0.1.2, =0.0.9, =0.1.6, =0.0.1, =0.2.0, =0.5.1 and more Source cves: CVE-2024-34072 Source advisory: OSV:PYSEC-2026-1889...
CVE-2024-34072
sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. The sagemaker.basedeserializers.NumpyDeserializer module before v2.218.0 allows potentially unsafe deserialization when untrusted data is passed as pickled object arrays. This consequently ma...
anymodality (0.1.0), autogluon-cloud (>=0.1.1b20230324, <=0.2.1b20230929) +21 more potentially affected by CVE-2024-34072 via sagemaker (>=2.16.1, <=2.207.1)
sagemaker PYPI version =2.16.1, =0.1.1b20230324, =0.1.17, =0.9.0, =1.0.0, =1.97.0.dev0, =1.0.0, =1.0.0, =0.1.2, =0.0.9, =0.1.6, =0.0.1, =0.2.0, =0.5.1 and more Source cves: CVE-2024-34072 Source advisory: GHSA-WJVX-JHPJ-R54R...
CVE-2024-34072 Deserialization of Untrusted Data in sagemaker-python-sdk
sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. The sagemaker.basedeserializers.NumpyDeserializer module before v2.218.0 allows potentially unsafe deserialization when untrusted data is passed as pickled object arrays. This consequently ma...
anymodality (0.1.0), autogluon-cloud (>=0.1.1b20230324, <=0.2.1b20230929) +22 more potentially affected by CVE-2024-34072 via sagemaker (>=1.52.1, <=2.207.1)
sagemaker PYPI version =1.52.1, =0.1.1b20230324, =0.1.17, =0.9.0, =0.2.8, =1.97.0.dev0, =1.0.0, =1.0.0, =0.1.2, =0.0.9, =0.1.6, =0.0.1, =0.0.4 and more Source cves: CVE-2024-34072 Source advisory: MEND:CVE-2024-34072...
CVE-2024-34072 Deserialization of Untrusted Data in sagemaker-python-sdk
sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. The sagemaker.basedeserializers.NumpyDeserializer module before v2.218.0 allows potentially unsafe deserialization when untrusted data is passed as pickled object arrays. This consequently ma...