Skip to content
OpenAdvisories

Package · PyPI

redshift-connector

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.8
    CVE-2026-8838 Public exploit

    Remote Code Execution via eval() Injection in amazon-redshift-python-driver

    Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-middle actor to execute arbitrary code on the client. To remediate this issue, users should up…

    AWS Amazon Redshift connector for Python airflow-3 redshift-connector Wolfi PyPI
  • High 7.0
    CVE-2025-5279

    Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin

    When the Amazon Redshift Python Connector is configured with the BrowserAzureOAuth2CredentialsProvider plugin, the driver skips the SSL certificate validation step for the Identity Provider. An insecure connection could allow an actor to intercept the token e…

    amazon Redshift airflow-3 airflow Wolfi PyPI
  • High 8.0
    CVE-2024-12745

    SQL Injection in the Amazon Redshift Python Connector affecting v2.1.4

    A SQL injection in the Amazon Redshift Python Connector v2.1.4 allows a user to gain escalated privileges via the get_schemas, get_tables, or get_columns Metadata APIs. Users are recommended to upgrade to the driver version 2.1.5 or revert to driver version 2…

    amazon Amazon Redshift Python Connector airflow redshift-connector Wolfi PyPI