PyPI/redshift-connector CVE-2024-12745: high 8, EPSS 0.53%
Amazon Redshift Python Connector vulnerable to SQL Injection
Action: Upgrade redshift-connector to 2.1.5 or later.
pip install redshift-connector==2.1.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.1.4 | 2.1.5 | - |
Fixed versions
| 2.1.5 |
Sources
- osv: GHSA-8gc2-vq6m-rwjw
- https://github.com/aws/amazon-redshift-python-driver/security/advisories/GHSA-8gc2-vq6m-rwjw
- https://nvd.nist.gov/vuln/detail/CVE-2024-12745
- https://aws.amazon.com/security/security-bulletins/AWS-2024-015
- https://github.com/aws/amazon-redshift-python-driver
- https://github.com/aws/amazon-redshift-python-driver/releases/tag/v2.1.5
CVE-2024-12745 · published · modified · JSON