{"action":"Upgrade com.amazon.redshift:redshift-jdbc42 to 2.1.0.32 or later.","affected":[{"fixed":"2.1.0.32","introduced":"2.1.0.31"}],"component":"com.amazon.redshift:redshift-jdbc42","cve_ids":["CVE-2024-12744"],"ecosystem":"Maven","epss":0.00587,"exploited":false,"fixed_versions":["2.1.0.32"],"ghsa_id":"GHSA-8596-2jgr-ppj7","id":"tcs_01M5N8KTV97SMD2VXNPP10VTN4","modified_at":"2025-10-14T21:54:10Z","published_at":"2024-12-26T20:27:10Z","references":["https://osv.dev/vulnerability/GHSA-8596-2jgr-ppj7","https://github.com/aws/amazon-redshift-jdbc-driver/security/advisories/GHSA-8596-2jgr-ppj7","https://nvd.nist.gov/vuln/detail/CVE-2024-12744","https://aws.amazon.com/security/security-bulletins/AWS-2024-015","https://github.com/aws/amazon-redshift-jdbc-driver","https://github.com/aws/amazon-redshift-jdbc-driver/releases/tag/v2.1.0.32"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-8596-2jgr-ppj7","url":"https://osv.dev/vulnerability/GHSA-8596-2jgr-ppj7"}],"summary":"Amazon Redshift JDBC Driver vulnerable to SQL Injection"}