sagemaker-python-sdk

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Command Injection in sagemaker-python-sdkCVE-2024-34073aws · CVSS 7.8 · 1.2% likely

   CWE-78

2. Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline pathCVE-2026-83551AWS · CVSS 7.2 · 0.8% likely

   CWE-312

3. Insertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]pyCVE-2026-110248AWS · CVSS 5.3 · 0.5% likely

   CWE-532

4. Cleartext transmission of sensitive materials in aws/sagemaker-python-sdkCVE-2026-1777AWS · CVSS 7.2 · 0.5% likely

   CWE-319

5. Deserialization of Untrusted Data in sagemaker-python-sdkCVE-2024-34072aws · CVSS 7.8 · 0.4% likely

   CWE-502

6. TLS disabled by default in select aws/sagemaker-python-sdk configurationsCVE-2026-1778AWS · CVSS 5.9 · 0.3% likely

   CWE-295

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.