{"schema_version":"2","view":"grouped","data":[{"id":70975,"cve_ids":[],"payload":{"kind":"advisory","title":"SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality","summary":"## Summary This advisory addresses the use of the search_hub() function within the SageMaker Python SDK's JumpStart search functionality. An actor with the ability to control query parameters passed to the search_hub() function could potentially provide malformed input that causes the eval() function to execute arbitrary commands, access sensitive data, or compromise the execution environment. A defense-in-depth enhancement has been implemented to replace code evaluation with safe string operations when processing search query parameters. This enhancement removes the use of eval() from the execution path, replacing it with a safe recursive descent parser. The change was released in SageMaker Python SDK version 3.4.0 on January 23, 2026. This advisory is informational to help customers understand their responsibilities regarding input validation and configuration security under the [AWS Shared Responsibility Model](https://aws.amazon.com/compliance/shared-responsibility-model/). ## Impact Customer applications that pass unsanitized or untrusted input directly to the search_hub() function's query parameter could be prone to Remote Code Execution (RCE), potentially allowing attackers to execute arbitrary commands, access sensitive data, or compromise the execution environment. While the SDK was functioning within the requirements of the shared responsibility model—where input sanitization falls on the customer side—additional safeguards have been added to support secure customer","evidence":"osv:GHSA-5r2p-pjr8-7fh7","products":[{"name":{"value":"sagemaker","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"3.0","evidence":"/affected/0/versions"},{"value":"3.0.1","evidence":"/affected/0/versions"},{"value":"3.1.0","evidence":"/affected/0/versions"},{"value":"3.1.1","evidence":"/affected/0/versions"},{"value":"3.2.0","evidence":"/affected/0/versions"},{"value":"3.3.0","evidence":"/affected/0/versions"},{"value":"3.3.1","evidence":"/affected/0/versions"}]}],"severity":"high","structured":{"id":"GHSA-5r2p-pjr8-7fh7","aliases":["GHSA-5r2p-pjr8-7fh7"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.4.0"}]}],"package":{"name":"sagemaker","purl":"pkg:pypi/sagemaker","ecosystem":"PyPI"},"versions":["3.0","3.0.1","3.1.0","3.1.1","3.2.0","3.3.0","3.3.1"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-5r2p-pjr8-7fh7/GHSA-5r2p-pjr8-7fh7.json"}}],"modified":"2026-10-02T20:15:05.895004600Z","provider":"osv","references":["https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-5r2p-pjr8-7fh7","https://github.com/aws/sagemaker-python-sdk/pull/5497","https://github.com/aws/sagemaker-python-sdk/commit/3203e4996219799e7fcad214c7925ffd8594da1f","https://github.com/aws/sagemaker-python-sdk/commit/e706e578519bd9b92ea44b9b15f872eca5e77ea4","https://github.com/aws/sagemaker-python-sdk"],"provider_metadata":{"cwe_ids":["CWE-184"],"severity":"HIGH","github_reviewed":true,"nvd_published_at":null,"github_reviewed_at":"2026-03-05T22:01:09Z"}},"related_cves":[],"security_relevant":true,"severity_evidence":"/database_specific/severity"},"group_id":"osv:GHSA-5r2p-pjr8-7fh7","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-5r2p-pjr8-7fh7","advisory_id":"6392bf7b-3a64-48f6-a74e-ec5154fcb6b8","event_types":["advisory"],"published_at":"2026-10-25T22:46:01.049242+00:00","technologies":["core-osv","sagemaker"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-03-05T22:01:09+00:00","detail_url":"/advisories/osv%3AGHSA-5r2p-pjr8-7fh7","group":{"id":"osv:GHSA-5r2p-pjr8-7fh7","revision":1,"primary_event_id":71348,"change":"published","superseded_by":[],"changed":{"id":71348,"cve_ids":[],"payload":{"kind":"advisory","title":"SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality","summary":"## Summary This advisory addresses the use of the search_hub() function within the SageMaker Python SDK's JumpStart search functionality. An actor with the ability to control query parameters passed to the search_hub() function could potentially provide malformed input that causes the eval() function to execute arbitrary commands, access sensitive data, or compromise the execution environment. A defense-in-depth enhancement has been implemented to replace code evaluation with safe string operations when processing search query parameters. This enhancement removes the use of eval() from the execution path, replacing it with a safe recursive descent parser. The change was released in SageMaker Python SDK version 3.4.0 on January 23, 2026. This advisory is informational to help customers understand their responsibilities regarding input validation and configuration security under the [AWS Shared Responsibility Model](https://aws.amazon.com/compliance/shared-responsibility-model/). ## Impact Customer applications that pass unsanitized or untrusted input directly to the search_hub() function's query parameter could be prone to Remote Code Execution (RCE), potentially allowing attackers to execute arbitrary commands, access sensitive data, or compromise the execution environment. While the SDK was functioning within the requirements of the shared responsibility model—where input sanitization falls on the customer side—additional safeguards have been added to support secure customer","evidence":"osv:GHSA-5r2p-pjr8-7fh7","products":[{"name":{"value":"sagemaker","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"3.0","evidence":"/affected/0/versions"},{"value":"3.0.1","evidence":"/affected/0/versions"},{"value":"3.1.0","evidence":"/affected/0/versions"},{"value":"3.1.1","evidence":"/affected/0/versions"},{"value":"3.2.0","evidence":"/affected/0/versions"},{"value":"3.3.0","evidence":"/affected/0/versions"},{"value":"3.3.1","evidence":"/affected/0/versions"}]}],"severity":"high","structured":{"id":"GHSA-5r2p-pjr8-7fh7","aliases":["GHSA-5r2p-pjr8-7fh7"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.4.0"}]}],"package":{"name":"sagemaker","purl":"pkg:pypi/sagemaker","ecosystem":"PyPI"},"versions":["3.0","3.0.1","3.1.0","3.1.1","3.2.0","3.3.0","3.3.1"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-5r2p-pjr8-7fh7/GHSA-5r2p-pjr8-7fh7.json"}}],"modified":"2026-10-02T20:15:05.895004600Z","provider":"osv","references":["https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-5r2p-pjr8-7fh7","https://github.com/aws/sagemaker-python-sdk/pull/5497","https://github.com/aws/sagemaker-python-sdk/commit/3203e4996219799e7fcad214c7925ffd8594da1f","https://github.com/aws/sagemaker-python-sdk/commit/e706e578519bd9b92ea44b9b15f872eca5e77ea4","https://github.com/aws/sagemaker-python-sdk"],"provider_metadata":{"cwe_ids":["CWE-184"],"severity":"HIGH","github_reviewed":true,"nvd_published_at":null,"github_reviewed_at":"2026-03-05T22:01:09Z"}},"related_cves":[],"security_relevant":true,"severity_evidence":"/database_specific/severity"},"group_id":"osv:GHSA-5r2p-pjr8-7fh7","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-5r2p-pjr8-7fh7","advisory_id":"6392bf7b-3a64-48f6-a74e-ec5154fcb6b8","event_types":["advisory"],"published_at":"2026-10-25T22:46:01.049242+00:00","technologies":["core-osv","sagemaker"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-03-05T22:01:09+00:00","detail_url":"/events/71348"},"members":[{"id":71348,"cve_ids":[],"payload":{"kind":"advisory","title":"SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality","summary":"## Summary This advisory addresses the use of the search_hub() function within the SageMaker Python SDK's JumpStart search functionality. An actor with the ability to control query parameters passed to the search_hub() function could potentially provide malformed input that causes the eval() function to execute arbitrary commands, access sensitive data, or compromise the execution environment. A defense-in-depth enhancement has been implemented to replace code evaluation with safe string operations when processing search query parameters. This enhancement removes the use of eval() from the execution path, replacing it with a safe recursive descent parser. The change was released in SageMaker Python SDK version 3.4.0 on January 23, 2026. This advisory is informational to help customers understand their responsibilities regarding input validation and configuration security under the [AWS Shared Responsibility Model](https://aws.amazon.com/compliance/shared-responsibility-model/). ## Impact Customer applications that pass unsanitized or untrusted input directly to the search_hub() function's query parameter could be prone to Remote Code Execution (RCE), potentially allowing attackers to execute arbitrary commands, access sensitive data, or compromise the execution environment. While the SDK was functioning within the requirements of the shared responsibility model—where input sanitization falls on the customer side—additional safeguards have been added to support secure customer","evidence":"osv:GHSA-5r2p-pjr8-7fh7","products":[{"name":{"value":"sagemaker","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.4.0","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"3.0","evidence":"/affected/0/versions"},{"value":"3.0.1","evidence":"/affected/0/versions"},{"value":"3.1.0","evidence":"/affected/0/versions"},{"value":"3.1.1","evidence":"/affected/0/versions"},{"value":"3.2.0","evidence":"/affected/0/versions"},{"value":"3.3.0","evidence":"/affected/0/versions"},{"value":"3.3.1","evidence":"/affected/0/versions"}]}],"severity":"high","structured":{"id":"GHSA-5r2p-pjr8-7fh7","aliases":["GHSA-5r2p-pjr8-7fh7"],"metrics":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.4.0"}]}],"package":{"name":"sagemaker","purl":"pkg:pypi/sagemaker","ecosystem":"PyPI"},"versions":["3.0","3.0.1","3.1.0","3.1.1","3.2.0","3.3.0","3.3.1"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-5r2p-pjr8-7fh7/GHSA-5r2p-pjr8-7fh7.json"}}],"modified":"2026-10-02T20:15:05.895004600Z","provider":"osv","references":["https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-5r2p-pjr8-7fh7","https://github.com/aws/sagemaker-python-sdk/pull/5497","https://github.com/aws/sagemaker-python-sdk/commit/3203e4996219799e7fcad214c7925ffd8594da1f","https://github.com/aws/sagemaker-python-sdk/commit/e706e578519bd9b92ea44b9b15f872eca5e77ea4","https://github.com/aws/sagemaker-python-sdk"],"provider_metadata":{"cwe_ids":["CWE-184"],"severity":"HIGH","github_reviewed":true,"nvd_published_at":null,"github_reviewed_at":"2026-03-05T22:01:09Z"}},"related_cves":[],"security_relevant":true,"severity_evidence":"/database_specific/severity"},"group_id":"osv:GHSA-5r2p-pjr8-7fh7","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-5r2p-pjr8-7fh7","advisory_id":"6392bf7b-3a64-48f6-a74e-ec5154fcb6b8","event_types":["advisory"],"published_at":"2026-10-25T22:46:01.049242+00:00","technologies":["core-osv","sagemaker"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-03-05T22:01:09+00:00","detail_url":"/events/71348"}]}}],"next_after":70975,"next_before":70975}