GHSA-WJVX-JHPJ-R54R sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data

Impact sagemaker.basedeserializers.NumpyDeserializer module before v2.218.0 allows potentially unsafe deserialization when untrusted data is passed as pickled object arrays. This consequently may allow an unprivileged third party to cause remote code execution, denial of service, affecting both...

PT-2024-25683 · Amazon · Sagemaker-Python-Sdk

Name of the Vulnerable Software and Affected Versions: sagemaker-python-sdk versions prior to 2.218.0 Description: The issue concerns potentially unsafe deserialization in the sagemaker.base deserializers.NumpyDeserializer module when untrusted data is passed as pickled object arrays. This may...