CVE-2026-65321

CVE-2026-65321 affects PyAthena prior to 3.35.4. The vulnerability stems from improper quote escaping in DefaultParameterFormatter.format(), where DELETE and CTAS flows go through _escape_hive and backslash-escape single quotes instead of doubling them. Because Athena and Trino do not treat backs...