PyPI/sagemaker: high

SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality

Action: Upgrade sagemaker to 3.4.0 or later.

pip install sagemaker==3.4.0

Affected

Fixed versions

Sources

• osv: GHSA-5r2p-pjr8-7fh7
• https://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-5r2p-pjr8-7fh7
• https://github.com/aws/sagemaker-python-sdk/pull/5497
• https://github.com/aws/sagemaker-python-sdk/commit/3203e4996219799e7fcad214c7925ffd8594da1f
• https://github.com/aws/sagemaker-python-sdk/commit/e706e578519bd9b92ea44b9b15f872eca5e77ea4
• https://github.com/aws/sagemaker-python-sdk

published 2026-03-05T22:01:09Z · modified 2026-10-02T20:15:05.895004600Z · JSON