Skip to content
OpenAdvisories

Archive

2 August 2026

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-65321 Public exploit

    PyAthena SQL Injection via DefaultParameterFormatter DELETE/CTAS

    PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_h…