p PatchFirst

CVE-2025-0508

CVE-2025-0508 · MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This issue can cause integrity problems within the pipeline, potentially leading to erroneous processing outcomes.

CVSS 5.9 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • aws/sagemaker-python-sdk

    Versions
    • ≥ unspecified, < 4965: Affected (custom)

    Update to 4965

  • sagemaker PyPI

    Versions
    • 1.0.0
    • 1.0.1
    • 1.0.2
    • 1.1.0
    • 1.1.1
    • 1.1.2
    • 1.1.3
    • 1.10.0
    • 1.10.1
    • 1.11.0
    • 1.11.1
    • 1.11.2
    • 1.11.3
    • 1.12.0
    • 1.13.0
    • 1.14.0
    • 1.14.1
    • 1.14.2
    • 1.15.0
    • 1.15.1
    • 1.15.2
    • 1.16.1
    • 1.16.1.post1
    • 1.16.2
    • 1.16.3
    • 1.17.0
    • 1.17.1
    • 1.17.2
    • 1.18.0
    • 1.18.1
    • 1.18.10
    • 1.18.11
    • 1.18.12
    • 1.18.13
    • 1.18.14
    • 1.18.14.post0
    • 1.18.14.post1
    • 1.18.15
    • 1.18.16
    • 1.18.17
    • 1.18.18
    • 1.18.19
    • 1.18.2
    • 1.18.3
    • 1.18.3.post1
    • 1.18.4
    • 1.18.5
    • 1.18.6.post0
    • 1.18.7
    • 1.18.8
    • 1.18.9
    • 1.18.9.post0
    • 1.18.9.post1
    • 1.19.0
    • 1.19.1
    • 1.2.0
    • 1.2.1
    • 1.2.2
    • 1.2.3
    • 1.2.4
    • 1.2.5
    • 1.20.0
    • 1.20.1
    • 1.20.2
    • 1.20.3
    • 1.21.0
    • 1.21.1
    • 1.21.2
    • 1.22.0
    • 1.23.0
    • 1.24.0
    • 1.25.0
    • 1.25.1
    • 1.26.0
    • 1.27.0
    • 1.28.0
    • 1.28.1
    • 1.28.2
    • 1.28.3
    • 1.29.0
    • 1.3.0
    • 1.30.0
    • 1.31.0
    • 1.31.1
    • 1.32.0
    • 1.32.1
    • 1.32.2
    • 1.33.0
    • 1.34.0
    • 1.34.1
    • 1.34.2
    • 1.34.3
    • 1.35.0
    • 1.35.1
    • 1.36.0
    • 1.36.1
    • 1.36.2
    • 1.36.3
    • 1.36.4
    • 1.37.0
    • 1.37.1
    • 1.37.2
    • 1.38.0
    • 1.38.1
    • 1.38.2
    • 1.38.3
    • 1.38.4
    • 1.38.5
    • 1.38.6
    • 1.39.0
    • 1.39.1
    • 1.39.2
    • 1.39.3
    • 1.39.4
    • 1.4.0
    • 1.4.1
    • 1.4.2
    • 1.40.0
    • 1.40.1
    • 1.40.2
    • 1.41.0
    • 1.42.0
    • 1.42.1
    • 1.42.2
    • 1.42.3
    • 1.42.4
    • 1.42.5
    • 1.42.6
    • 1.42.6.post0
    • 1.42.7
    • 1.42.8
    • 1.42.9
    • 1.43.0
    • 1.43.1
    • 1.43.2
    • 1.43.3
    • 1.43.4
    • 1.43.4.post0
    • 1.43.4.post1
    • 1.43.5
    • 1.44.0
    • 1.44.1
    • 1.44.2
    • 1.44.3
    • 1.44.4
    • 1.45.0
    • 1.45.1
    • 1.45.2
    • 1.46.0
    • 1.47.1
    • 1.48.0
    • 1.48.1
    • 1.49.0
    • 1.5.0
    • 1.5.1
    • 1.5.2
    • 1.5.3
    • 1.5.4
    • 1.50.0
    • 1.50.1
    • 1.50.10
    • 1.50.10.post0
    • 1.50.11
    • 1.50.12
    • 1.50.13
    • 1.50.14
    • 1.50.14.post0
    • 1.50.15
    • 1.50.16
    • 1.50.17
    • 1.50.17.post0
    • 1.50.18
    • 1.50.18.post0
    • 1.50.2
    • 1.50.3
    • 1.50.4
    • 1.50.5
    • 1.50.6
    • 1.50.6.post0
    • 1.50.7
    • 1.50.8
    • 1.50.9
    • 1.50.9.post0
    • 1.51.0
    • 1.51.1
    • 1.51.2
    • 1.51.3
    • 1.51.4
    • 1.52.0
    • 1.52.0.post0
    • 1.52.1
    • 1.53.0
    • 1.54.0
    • 1.55.0
    • 1.55.0.post0
    • 1.55.1
    • 1.55.2
    • 1.55.3
    • 1.55.4
    • 1.56.0
    • 1.56.1
    • 1.56.1.post0
    • 1.56.1.post1
    • 1.56.2
    • 1.56.3
    • 1.57.0
    • 1.58.0
    • 1.58.1
    • 1.58.2
    • 1.58.2.post0
    • 1.58.3
    • 1.58.4
    • 1.59.0
    • 1.6.0
    • 1.6.1
    • 1.60.0
    • 1.60.0.post0
    • 1.60.1
    • 1.60.2
    • 1.61.0
    • 1.62.0
    • 1.63.0
    • 1.64.0
    • 1.64.1
    • 1.65.0
    • 1.65.1
    • 1.65.1.post0
    • 1.65.1.post1
    • 1.66.0
    • 1.67.0
    • 1.67.1
    • 1.67.1.post0
    • 1.68.0
    • 1.69.0
    • 1.7.0
    • 1.7.1
    • 1.7.2
    • 1.70.0
    • 1.70.1
    • 1.70.2
    • 1.71.0
    • 1.71.1
    • 1.72.0
    • 1.72.1
    • 1.8.0
    • 1.9.0
    • 1.9.1
    • 1.9.2
    • 1.9.3
    • 1.9.3.1
    • 2.0.0
    • 2.0.1
    • 2.1.0
    • 2.10.0
    • 2.100.0
    • 2.101.1
    • 2.102.0
    • 2.103.0
    • 2.104.0
    • 2.105.0
    • 2.106.0
    • 2.107.0
    • 2.108.0
    • 2.109.0
    • 2.11.0
    • 2.110.0
    • 2.111.0
    • 2.112.0
    • 2.112.1
    • 2.112.2
    • 2.113.0
    • 2.114.0
    • 2.115.0
    • 2.116.0
    • 2.117.0
    • 2.118.0
    • 2.119.0
    • 2.12.0
    • 2.120.0
    • 2.121.0
    • 2.121.1
    • 2.121.2
    • 2.122.0
    • 2.122.1.dev0
    • 2.123.0
    • 2.124.0
    • 2.125.0
    • 2.126.0
    • 2.127.0
    • 2.128.0
    • 2.129.0
    • 2.13.0
    • 2.130.0
    • 2.131.0
    • 2.131.1
    • 2.132.0
    • 2.133.0
    • 2.134.0
    • 2.134.1
    • 2.135.0
    • 2.135.1
    • 2.135.1.post0
    • 2.136.0
    • 2.137.0
    • 2.138.0
    • 2.139.0
    • 2.14.0
    • 2.140.0
    • 2.140.1
    • 2.141.0
    • 2.142.0
    • 2.143.0
    • 2.144.0
    • 2.145.0
    • 2.146.0
    • 2.146.1
    • 2.147.0
    • 2.148.0
    • 2.149.0
    • 2.15.0
    • 2.15.1
    • 2.15.2
    • 2.15.3
    • 2.15.4
    • 2.150.0
    • 2.151.0
    • 2.152.0
    • 2.153.0
    • 2.154.0
    • 2.155.0
    • 2.156.0
    • 2.157.0
    • 2.158.0
    • 2.159.0
    • 2.16.0
    • 2.16.0.post0
    • 2.16.1
    • 2.16.2
    • 2.16.3
    • 2.16.3.post0
    • 2.16.4
    • 2.160.0
    • 2.161.0
    • 2.162.0
    • 2.163.0
    • 2.164.0
    • 2.165.0
    • 2.166.0
    • 2.167.0
    • 2.168.0
    • 2.169.0
    • 2.17.0
    • 2.170.0
    • 2.171.0
    • 2.172.0
    • 2.173.0
    • 2.174.0
    • 2.175.0
    • 2.176.0
    • 2.177.0
    • 2.177.1
    • 2.178.0
    • 2.179.0
    • 2.18.0
    • 2.180.0
    • 2.181.0
    • 2.182.0
    • 2.183.0
    • 2.184.0
    • 2.184.0.post0
    • 2.185.0
    • 2.186.0
    • 2.187.0
    • 2.188.0
    • 2.189.0
    • 2.19.0
    • 2.190.0
    • 2.191.0
    • 2.192.0
    • 2.192.1
    • 2.193.0
    • 2.194.0
    • 2.195.0
    • 2.195.1
    • 2.196.0
    • 2.197.0
    • 2.197.1
    • 2.198.0
    • 2.198.1
    • 2.199.0
    • 2.2.0
    • 2.20.0
    • 2.200.0
    • 2.200.1
    • 2.201.0
    • 2.202.0
    • 2.202.1
    • 2.203.0
    • 2.203.1
    • 2.204.0
    • 2.205.0
    • 2.206.0
    • 2.207.0
    • 2.207.1
    • 2.208.0
    • 2.209.0
    • 2.21.0
    • 2.210.0
    • 2.211.0
    • 2.212.0
    • 2.213.0
    • 2.214.0
    • 2.214.1
    • 2.214.2
    • 2.214.3
    • 2.215.0
    • 2.216.0
    • 2.216.1
    • 2.217.0
    • 2.218.0
    • 2.218.1
    • 2.219.0
    • 2.22.0
    • 2.220.0
    • 2.221.0
    • 2.221.1
    • 2.222.0
    • 2.222.1
    • 2.223.0
    • 2.224.0
    • 2.224.1
    • 2.224.2
    • 2.224.3
    • 2.224.4
    • 2.225.0
    • 2.226.0
    • 2.226.1
    • 2.227.0
    • 2.228.0
    • 2.229.0
    • 2.23.0
    • 2.23.1
    • 2.23.2
    • 2.23.3
    • 2.23.4
    • 2.23.4.post0
    • 2.23.5
    • 2.23.6
    • 2.230.0
    • 2.231.0
    • 2.232.0
    • 2.232.1
    • 2.232.2
    • 2.232.3
    • 2.233.0
    • 2.234.0
    • 2.235.0
    • 2.235.1
    • 2.235.2
    • 2.236.0
    • 2.237.0
    • 2.237.1
    • 2.24.0
    • 2.24.1
    • 2.24.2
    • 2.24.3
    • 2.24.4
    • 2.24.5

    Update to 2.237.3

Original sources

Check your server →