CVE-2024-34073

sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. In affected versions the capturedependencies function in sagemaker.serve.saveretrive.version100.save.utils module allows for potentially unsafe Operating System OS Command Injection if...

MLflow SageMaker Command Injection Vulnerability

Description The vulnerability exists in /mlflow/sagemaker/init.py at lines 161-167, where user-supplied container image names are directly interpolated into shell commands without proper sanitization before being passed to os.system. Vulnerable Code Path : CLI Input --container parameter ↓...

EUVD-2024-1498

Malicious code in bioql PyPI...

EUVD-2024-43982

Malicious code in bioql PyPI...

EUVD-2024-1835

Malicious code in bioql PyPI...

EUVD-2025-6837

Malicious code in bioql PyPI...

Out-of-bounds Write

Overview nvidia-pytriton is a PyTriton - Flask/FastAPI-like interface to simplify Triton's deployment in Python environments. Affected versions of this package are vulnerable to Out-of-bounds Write via the HTTP and Sagemaker request handler. An attacker could cause an out-of-bounds write through ...

MAL-2025-191680 Malicious code in amzn-sagemaker-studio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a557d275cca7627fa4d3e2c72f0fc9b78fc5ac70aa87a0ab586f1abf9f8777a6 Package exfiltrates the environment variables during the import --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaig...

Malicious code in sagemaker-forked-extensions (npm)

The package sagemaker-forked-extensions was found to contain malicious code...

MAL-2025-32625 Malicious code in sagemaker_sharing_extension (npm)

The package sagemakersharingextension was found to contain malicious code...

MAL-2025-32624 Malicious code in sagemaker_session_manager (npm)

The package sagemakersessionmanager was found to contain malicious code...

MAL-2025-32621 Malicious code in sagemaker-forked-extensions (npm)

The package sagemaker-forked-extensions was found to contain malicious code...

Malicious code in sagemaker_notebooks_extension (npm)

The package sagemakernotebooksextension was found to contain malicious code...

Malicious code in sagemaker_examples (npm)

The package sagemakerexamples was found to contain malicious code...

MAL-2025-32622 Malicious code in sagemaker_examples (npm)

The package sagemakerexamples was found to contain malicious code...

Malicious code in sagemaker_session_manager (npm)

The package sagemakersessionmanager was found to contain malicious code...

Malicious code in sagemaker_sharing_extension (npm)

The package sagemakersharingextension was found to contain malicious code...

MAL-2025-32623 Malicious code in sagemaker_notebooks_extension (npm)

The package sagemakernotebooksextension was found to contain malicious code...

aggregation-agent (>=0.1.2 <=0.1.11), airflow-add-ons (>=0.2.7 <=0.2.15) +125 more potentially affected by CVE-2025-5279 via redshift-connector (>=2.0.888 <=2.1.2)

redshift-connector PYPI version =2.0.888, =0.1.2, =0.2.7, =0.0.1, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.3, =0.1.0, =3.1.0rc1, =1.0.0, =1.0.4 - arrowjet =0.1.0 and more Source cves: CVE-2025-5279 Source advisory: OSV:GHSA-R244-WG5G-6W2R...

MD5 Hash Collisions

sagemaker is vulnerable to MD5 Hash Collisions. The vulnerability is due to weak hashing in workflow identification due to the reuse of results from different configurations that produce the same MD5 hash, potentially leading to unintended workflow replacements and integrity issues...