Skip to content
OpenAdvisories

Vendor

laughingman7743

1 known vulnerabilities.

Products

PyAthena 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-65321 Public exploit

    PyAthena SQL Injection via DefaultParameterFormatter DELETE/CTAS

    PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_h…

    laughingman7743 PyAthena