facebookresearch / facebookresearch/sam-3d-objects
vulnerabiliy in sam-3d-objects project
- Dominant language
- Python
- Stars
- 7.4k
- Forks
- 878
- PR merge metrics
- No merged PRs in 30d
Description
While working on sam-3d-objects project, I performed a dependency security scan using a vulnerability scanning tool and identified a critical vulnerability in the SageMaker Python SDK. The issue affects versions prior to **3.4.0** and is related to the `search_hub()` function, which internally uses the `eval()` function to process certain inputs. Because the input is not properly sanitized or validated, an attacker could manipulate query parameters to inject malicious code.
[CVE Report](https://vulert.com/vuln-scan/list/e115d056-d6cc-4f1c-ac36-bf8e1901c8e4?sort_order=desc&sort_by=created_at)
[CVE Link](https://vulert.com/vuln-db/sagemaker-python-sdk-replaced-eval---with-safe-parser-in-jumpstart-search-functionality?scan-id=e115d056-d6cc-4f1c-ac36-bf8e1901c8e4)
Contributor guide
Assessment
This issue has not been assessed yet.