CVE-2026-118029 Unverified ownership of the default Athena query result location in AWS SDK for pandas

Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas awswrangler before 3.16.1 might allow remote actors to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 bucket. To remediate this issue, users...

amazon-sagemaker-sql-editor (>=0.1.1, <=0.1.21), apache-airflow-providers-amazon (>=9.7.0rc1, <=9.8.0) +42 more potentially affected by CVE-2026-8838 via redshift-connector (>=2.0.888, <=2.1.13)

redshift-connector PYPI version =2.0.888, =0.1.1, =9.7.0rc1, =1.0.0, =0.1.1, =2.0.0, =0.1.7, =0.31.6, =0.1.17, =2.3.0.dev3, =1.0.0a1, =0.4.0, =0.0.1, =0.3.64, =6.1.2, =0.5.2, =0.6.1 and more Source cves: CVE-2026-8838 Source advisory: OSV:GHSA-29H4-R29X-HCHV...

anubis-policy-api (>=0.3.0, <=0.6.0), awsdf (0.1.12) +29 more potentially affected by CVE-2025-61385 via pg8000 (>=1.12.1, <=1.31.4)

pg8000 PYPI version =1.12.1, =0.3.0, =2.0.0, =0.17.1, =0.4.0, =2050.0.0, =0.0.6, =1.0.5, =0.5.2, =0.1.0, =0.0.1, =2.43.2, =1.0.0, =0.2.2, =1.0.1, =1.0.3 and more Source cves: CVE-2025-61385 Source advisory: OSV:GHSA-WQ2G-R956-J8CC...