{"action":"Upgrade sagemaker-training to 4.8.0 or later.","affected":[{"fixed":"4.8.0","introduced":"4.7.0"}],"component":"sagemaker-training","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["4.8.0"],"ghsa_id":"GHSA-635v-pc42-fr74","id":"tcs_01M5KF27Q9FQN73PHAYMA4KV4J","modified_at":"2024-12-03T06:05:38.861223Z","published_at":"2024-09-11T19:20:42Z","references":["https://osv.dev/vulnerability/GHSA-635v-pc42-fr74","https://github.com/aws/sagemaker-training-toolkit/security/advisories/GHSA-635v-pc42-fr74","https://github.com/aws/sagemaker-training-toolkit/commit/d8e56c90fa7fcc7421c0f7193bf9650fc2967213","https://github.com/aws/sagemaker-training-toolkit"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-635v-pc42-fr74","url":"https://osv.dev/vulnerability/GHSA-635v-pc42-fr74"}],"summary":"AWS SageMaker Training Toolkit logs CodeArtifact Authorization token"}