SageMaker Workflow component allows possibility of MD5 hash collisions

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

anymodality (0.1.0), autogluon-cloud (>=0.1.1b20230324, <=0.2.1b20230929) +25 more potentially affected by CVE-2025-0508 via sagemaker (>=2.16.1, <=2.236.0)

sagemaker PYPI version =2.16.1, =0.1.1b20230324, =0.4.6, =0.1.17, =0.1.0, =0.1.1, =0.9.0, =1.0.0, =1.97.0.dev0, =2.0.0, =1.0.0, =1.0.0, =0.1.2, =0.0.9, =0.0.10 - metamaker 0.1.0 and more Source cves: CVE-2025-0508 Source advisory: GHSA-32G6-MG92-GHM2...

anymodality (0.1.0), autogluon-cloud (>=0.1.1b20230324, <=0.2.1b20230929) +25 more potentially affected by CVE-2025-0508 via sagemaker (>=2.16.1, <=2.236.0)

sagemaker PYPI version =2.16.1, =0.1.1b20230324, =0.4.6, =0.1.17, =0.1.0, =0.1.1, =0.9.0, =1.0.0, =1.97.0.dev0, =2.0.0, =1.0.0, =1.0.0, =0.1.2, =0.0.9, =0.0.10 - metamaker 0.1.0 and more Source cves: CVE-2025-0508 Source advisory: SNYK:PYTHON-SAGEMAKER-9510926...

anymodality (0.1.0), autogluon-cloud (>=0.1.1b20230324, <=0.2.1b20230929) +25 more potentially affected by CVE-2025-0508 via sagemaker (>=2.16.1, <=2.236.0)

sagemaker PYPI version =2.16.1, =0.1.1b20230324, =0.4.6, =0.1.17, =0.1.0, =0.1.1, =0.9.0, =1.0.0, =1.97.0.dev0, =2.0.0, =1.0.0, =1.0.0, =0.1.2, =0.0.9, =0.0.10 - metamaker 0.1.0 and more Source cves: CVE-2025-0508 Source advisory: OSV:GHSA-32G6-MG92-GHM2...

ezsmdeploy (0.2.9) potentially affected by CVE-2025-0508 via sagemaker (1.60.0)

sagemaker PYPI version 1.60.0 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - ezsmdeploy 0.2.9 Source cves: CVE-2025-0508 Source advisory: OSV:GHSA-32G6-MG92-GHM2...

ezsmdeploy (>=0.2.8, <=0.3.1) potentially affected by CVE-2025-0508 via sagemaker (1.58.2)

sagemaker PYPI version 1.58.2 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - ezsmdeploy =0.2.8, =0.3.1 Source cves: CVE-2025-0508 Source advisory: OSV:GHSA-32G6-MG92-GHM2...

hydro-integrations (2.3.0.dev0) potentially affected by CVE-2025-0508 via sagemaker (1.52.1)

sagemaker PYPI version 1.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - hydro-integrations 2.3.0.dev0 Source cves: CVE-2025-0508 Source advisory: OSV:GHSA-32G6-MG92-GHM2...

Expected Behavior Violation

Overview sagemaker is an Open source library for training and deploying models on Amazon SageMaker. Affected versions of this package are vulnerable to Expected Behavior Violation via to the utilities.py component. An attacker can cause integrity problems within the pipeline, potentially leading ...

GHSA-32G6-MG92-GHM2 SageMaker Workflow component allows possibility of MD5 hash collisions

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

CVE-2025-0508

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

CVE-2025-0508 MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

CVE-2025-0508

CVE-2025-0508 affects the SageMaker Workflow component in aws/sagemaker-python-sdk, with MD5 hash collisions across all versions leading to potential workflow replacements and integrity issues in pipelines. The issue is documented across multiple feeds (including Red Hat, OSV, circl, and CVE list...

CVE-2025-0508

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

CVE-2025-0508 MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

CVE-2025-0508 MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

anymodality (0.1.0), autogluon-cloud (>=0.1.1b20230324, <=0.2.1b20230929) +26 more potentially affected by CVE-2025-0508 via sagemaker (>=1.52.1, <=2.236.0)

sagemaker PYPI version =1.52.1, =0.1.1b20230324, =0.4.6, =0.1.17, =0.1.0, =0.1.1, =0.9.0, =0.2.8, =1.97.0.dev0, =2.0.0, =1.0.0, =1.0.0, =0.1.2, =0.0.9, =0.0.10 and more Source cves: CVE-2025-0508 Source advisory: MEND:CVE-2025-0508...

Sagemaker-Python-SDK security vulnerabilities

sagemaker-python-sdk is an Amazon Web Services open source library for training and deploying machine learning models on Amazon SageMaker. A security vulnerability exists in sagemaker-python-sdk that stems from an MD5 hash collision in the SageMaker Workflow component that could result in workflo...

PT-2025-12317

Name of the Vulnerable Software and Affected Versions aws/sagemaker-python-sdk affected versions not specified Description The issue concerns a problem with MD5 hash collisions in the SageMaker Workflow component. This can cause workflows to be inadvertently replaced due to the reuse of results...

CVE-2025-0508: Use of Weak Hash

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

CVE-2024-34072

sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. The sagemaker.basedeserializers.NumpyDeserializer module before v2.218.0 allows potentially unsafe deserialization when untrusted data is passed as pickled object arrays. This consequently ma...