CVE-2025-5279
2 advisories.
PyPI/redshift-connector CVE-2025-5279: high 7.5, EPSS 0.31%
Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin
Action: Upgrade redshift-connector to 2.1.7 or later.
pip install redshift-connector==2.1.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.872 | 2.1.7 | - |
Fixed versions
| 2.1.7 |
Sources
- osv: GHSA-r244-wg5g-6w2r
- https://github.com/aws/amazon-redshift-python-driver/security/advisories/GHSA-r244-wg5g-6w2r
- https://nvd.nist.gov/vuln/detail/CVE-2025-5279
- https://aws.amazon.com/security/security-bulletins
- https://aws.amazon.com/security/security-bulletins/AWS-2025-011
- https://github.com/aws/amazon-redshift-python-driver
- https://github.com/aws/amazon-redshift-python-driver/releases/tag/v2.1.7
CVE-2025-5279 · published · modified · JSON
PyPI/redshift-connector CVE-2025-5279: high 7.5, EPSS 0.31%
Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin
Action: Upgrade redshift-connector to 2.1.7 or later.
pip install redshift-connector==2.1.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.872 | 2.1.7 | - |
Fixed versions
| 2.1.7 |
Sources
- osv: PYSEC-2026-1867
- https://github.com/aws/amazon-redshift-python-driver/security/advisories/GHSA-r244-wg5g-6w2r
- https://nvd.nist.gov/vuln/detail/CVE-2025-5279
- https://aws.amazon.com/security/security-bulletins
- https://aws.amazon.com/security/security-bulletins/AWS-2025-011
- https://github.com/aws/amazon-redshift-python-driver
- https://github.com/aws/amazon-redshift-python-driver/releases/tag/v2.1.7
- https://pypi.org/project/redshift-connector
- https://github.com/advisories/GHSA-r244-wg5g-6w2r
CVE-2025-5279 · published · modified · JSON