facebookresearch / facebookresearch/sam-3d-objects

vulnerabiliy in sam-3d-objects project

Open
#172 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
7.4k
Forks
878
PR merge metrics
No merged PRs in 30d

Description

While working on sam-3d-objects project, I performed a dependency security scan using a vulnerability scanning tool and identified a critical vulnerability in the SageMaker Python SDK. The issue affects versions prior to **3.4.0** and is related to the `search_hub()` function, which internally uses the `eval()` function to process certain inputs. Because the input is not properly sanitized or validated, an attacker could manipulate query parameters to inject malicious code.

[CVE Report](https://vulert.com/vuln-scan/list/e115d056-d6cc-4f1c-ac36-bf8e1901c8e4?sort_order=desc&sort_by=created_at)
[CVE Link](https://vulert.com/vuln-db/sagemaker-python-sdk-replaced-eval---with-safe-parser-in-jumpstart-search-functionality?scan-id=e115d056-d6cc-4f1c-ac36-bf8e1901c8e4)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.