aws/amazon-redshift-python-driver

aws/amazon-redshift-python-driver

Releases60

Frequency1 month 4 days

Last Release 11 days ago

Stars219

Redshift Python Connector. It supports Python Database API Specification v2.0.

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2026-8838 ↗	May 18, 2026Monday, 18 May 2026, 21:16	9.8 CRITICAL	—
Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-middle actor to execute arbitrary code on the client. To remediate this issue, users should upgrade to version 2.1.14.
CVE-2024-12745 ↗	Dec 24, 2024Tuesday, 24 December 2024, 17:15	8 HIGH	—
A SQL injection in the Amazon Redshift Python Connector v2.1.4 allows a user to gain escalated privileges via the get_schemas, get_tables, or get_columns Metadata APIs. Users are recommended to upgrade to the driver version 2.1.5 or revert to driver version 2.1.3.