Skip to content
OpenAdvisories

Product · AWS

aws-sdk-pandas

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.3

    Unverified ownership of the default EMR cluster log location in AWS SDK for pandas

    Unverified ownership of the default cluster log location in the EMR module in AWS SDK for pandas (awswrangler) from 1.1.0 before 3.18.0 might allow remote actors to read Amazon EMR cluster logs, including job step output, via a pre-created S3 bucket. To remed…

  • Medium 5.9

    Unverified ownership of the default Athena query result location in AWS SDK for pandas

    Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas (awswrangler) before 3.16.1 might allow remote actors to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 buc…