Skip to content
OpenAdvisories

Package · PyPI

redshift-connector

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.0
    CVE-2025-5279

    Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin

    When the Amazon Redshift Python Connector is configured with the BrowserAzureOAuth2CredentialsProvider plugin, the driver skips the SSL certificate validation step for the Identity Provider. An insecure connection could allow an actor to intercept the token e…

    amazon Redshift airflow-3 airflow Wolfi PyPI
  • High 8.0
    CVE-2024-12745

    SQL Injection in the Amazon Redshift Python Connector affecting v2.1.4

    A SQL injection in the Amazon Redshift Python Connector v2.1.4 allows a user to gain escalated privileges via the get_schemas, get_tables, or get_columns Metadata APIs. Users are recommended to upgrade to the driver version 2.1.5 or revert to driver version 2…

    amazon Amazon Redshift Python Connector airflow redshift-connector Wolfi PyPI