Количество 2
Количество 2
CVE-2026-9291
Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output bucket to achieve arbitrary code execution on any machine that processes job results. We recommend you upgrade to amazon-braket-sdk version 1.117.0 or later.
GHSA-g697-2xrc-gc46
amazon-braket-sdk vulnerable to Insecure Deserialization via pickle.loads()
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-9291 Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remote authenticated user with S3 write access to the job output bucket to achieve arbitrary code execution on any machine that processes job results. We recommend you upgrade to amazon-braket-sdk version 1.117.0 or later. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| GHSA-g697-2xrc-gc46 amazon-braket-sdk vulnerable to Insecure Deserialization via pickle.loads() | CVSS3: 7.1 | 0% Низкий | около 1 месяца назад |
Уязвимостей на страницу