
Vulnerabilities
AWS SageMaker SDK Logs Git Credentials in Plaintext Before Patch
A flaw in Amazon SageMaker Python SDK writes repository login details to CloudWatch Logs when Git clones fail, exposing secrets to authorized users.
Everything Threat Times has reported about Amazon SageMaker: 2 stories, newest first. Part of our Vulnerabilities coverage.

A flaw in Amazon SageMaker Python SDK writes repository login details to CloudWatch Logs when Git clones fail, exposing secrets to authorized users.

Two CVEs in the Amazon SageMaker Python SDK allow bypassing model artifact integrity checks, posing risks to ML pipelines.