CVE-2026-127119

Unverified ownership of the default cluster log location in the EMR module in AWS SDK for pandas awswrangler from 1.1.0 before 3.18.0 might allow remote actors to read Amazon EMR cluster logs, including job step output, via a pre-created S3 bucket. To remediate this issue, users should upgrade to...