CVE-2026-8838
2 advisories.
PyPI/redshift-connector CVE-2026-8838: critical 9.8, EPSS 0.80%
amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection
Action: Upgrade redshift-connector to 2.1.14 or later.
pip install redshift-connector==2.1.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.14 | - |
Fixed versions
| 2.1.14 |
Sources
- osv: GHSA-29h4-r29x-hchv
- https://github.com/aws/amazon-redshift-python-driver/security/advisories/GHSA-29h4-r29x-hchv
- https://nvd.nist.gov/vuln/detail/CVE-2026-8838
- https://github.com/aws/amazon-redshift-python-driver/commit/69a69dfdead75918e20384da52bcd760ded8dbca
- https://aws.amazon.com/security/security-bulletins/2026-033-aws
- https://github.com/aws/amazon-redshift-python-driver
- https://github.com/aws/amazon-redshift-python-driver/releases/tag/v2.1.14
CVE-2026-8838 · published · modified · JSON
PyPI/redshift-connector CVE-2026-8838: critical 9.8, EPSS 0.80%
amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection
Action: Upgrade redshift-connector to 2.1.14 or later.
pip install redshift-connector==2.1.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.14 | - |
Fixed versions
| 2.1.14 |
Sources
- osv: PYSEC-2026-521
- https://github.com/aws/amazon-redshift-python-driver/security/advisories/GHSA-29h4-r29x-hchv
- https://nvd.nist.gov/vuln/detail/CVE-2026-8838
- https://github.com/aws/amazon-redshift-python-driver/commit/69a69dfdead75918e20384da52bcd760ded8dbca
- https://aws.amazon.com/security/security-bulletins/2026-033-aws
- https://github.com/aws/amazon-redshift-python-driver
- https://github.com/aws/amazon-redshift-python-driver/releases/tag/v2.1.14
- https://pypi.org/project/redshift-connector
- https://github.com/advisories/GHSA-29h4-r29x-hchv
CVE-2026-8838 · published · modified · JSON