ai.starlake:spark-redshift_2.13 (>=6.5.0, <=6.5.1), ai.starlake:starlake-api_2.13 (>=1.5.8, <=1.5.15) +87 more potentially affected by CVE-2026-8178 via com.amazon.redshift:redshift-jdbc42 (>=2.0.0.3, <=2.2.1)

com.amazon.redshift:redshift-jdbc42 MAVEN version =2.0.0.3, =6.5.0, =1.5.8, =2025.34.3, =0.293, =0.293, =5.0.0, =5.1.0, =1.3.0, =1.19.1891, =0.1.15-alpha, =0.1.15-alpha, =0.1.15-alpha, =3.2.171, =6.0.0-spark3.3, =6.6.0-spark3.5 and more Source cves: CVE-2026-8178 Source advisory: GHSA-WMMV-VVG5-9...

ai.starlake:spark-redshift_2.13 (>=6.5.0, <=6.5.1), ai.starlake:starlake-api_2.13 (>=1.5.8, <=1.5.15) +87 more potentially affected by CVE-2026-8178 via com.amazon.redshift:redshift-jdbc42 (>=2.0.0.3, <=2.2.1)

com.amazon.redshift:redshift-jdbc42 MAVEN version =2.0.0.3, =6.5.0, =1.5.8, =2025.34.3, =0.293, =0.293, =5.0.0, =5.1.0, =1.3.0, =1.19.1891, =0.1.15-alpha, =0.1.15-alpha, =0.1.15-alpha, =3.2.171, =6.0.0-spark3.3, =6.6.0-spark3.5 and more Source cves: CVE-2026-8178 Source advisory:...

ai.starlake:spark-redshift_2.13 (>=6.5.0, <=6.5.1), ai.starlake:starlake-api_2.13 (>=1.5.8, <=1.5.15) +87 more potentially affected by CVE-2026-8178 via com.amazon.redshift:redshift-jdbc42 (>=2.0.0.3, <=2.2.1)

com.amazon.redshift:redshift-jdbc42 MAVEN version =2.0.0.3, =6.5.0, =1.5.8, =2025.34.3, =0.293, =0.293, =5.0.0, =5.1.0, =1.3.0, =1.19.1891, =0.1.15-alpha, =0.1.15-alpha, =0.1.15-alpha, =3.2.171, =6.0.0-spark3.3, =6.6.0-spark3.5 and more Source cves: CVE-2026-8178 Source advisory: MEND:CVE-2026-81...

io.github.josephlbarnett:db (>=3.2.340, <=3.2.379), us.fatehi:schemacrawler-cassandra (>=16.23.1, <=16.23.2) +10 more potentially affected by CVE-2024-12744 via com.amazon.redshift:redshift-jdbc42 (2.1.0.31)

com.amazon.redshift:redshift-jdbc42 MAVEN version 2.1.0.31 is affected by a known vulnerability. The following packages have a transitive dependency on com.amazon.redshift:redshift-jdbc42 and may be impacted: - io.github.josephlbarnett:db =3.2.340, =16.23.1, =16.23.1, =16.23.1, =16.23.1, =16.23.1...

io.github.josephlbarnett:db (>=3.2.340, <=3.2.379), us.fatehi:schemacrawler-cassandra (>=16.23.1, <=16.23.2) +10 more potentially affected by CVE-2024-12744 via com.amazon.redshift:redshift-jdbc42 (2.1.0.31)

com.amazon.redshift:redshift-jdbc42 MAVEN version 2.1.0.31 is affected by a known vulnerability. The following packages have a transitive dependency on com.amazon.redshift:redshift-jdbc42 and may be impacted: - io.github.josephlbarnett:db =3.2.340, =16.23.1, =16.23.1, =16.23.1, =16.23.1, =16.23.1...

io.github.josephlbarnett:db (>=3.2.340, <=3.2.379), us.fatehi:schemacrawler-cassandra (>=16.23.1, <=16.23.2) +10 more potentially affected by CVE-2024-12744 via com.amazon.redshift:redshift-jdbc42 (2.1.0.31)

com.amazon.redshift:redshift-jdbc42 MAVEN version 2.1.0.31 is affected by a known vulnerability. The following packages have a transitive dependency on com.amazon.redshift:redshift-jdbc42 and may be impacted: - io.github.josephlbarnett:db =3.2.340, =16.23.1, =16.23.1, =16.23.1, =16.23.1, =16.23.1...

com.netflix.metacat:metacat-connector-redshift (>=1.3.0, <=1.3.1), com.trib3:db (>=1.19.1891, <=3.1.5004) +63 more potentially affected by CVE-2024-32888 via com.amazon.redshift:redshift-jdbc42 (>=2.0.0.3, <=2.1.0.26)

com.amazon.redshift:redshift-jdbc42 MAVEN version =2.0.0.3, =1.3.0, =1.19.1891, =0.1.15-alpha, =0.1.15-alpha, =0.1.15-alpha, =6.0.0-spark3.3, =0.2.8, =359, =1.0.0, =1.0.0, =2.3.4, =0.1.5, =0.1.1, =2.59.0, =3.0.0 and more Source cves: CVE-2024-32888 Source advisory: GHSA-X3WM-HFFR-CHWM...

com.netflix.metacat:metacat-connector-redshift (>=1.3.0, <=1.3.1), com.trib3:db (>=1.19.1891, <=3.1.5004) +63 more potentially affected by CVE-2024-32888 via com.amazon.redshift:redshift-jdbc42 (>=2.0.0.3, <=2.1.0.26)

com.amazon.redshift:redshift-jdbc42 MAVEN version =2.0.0.3, =1.3.0, =1.19.1891, =0.1.15-alpha, =0.1.15-alpha, =0.1.15-alpha, =6.0.0-spark3.3, =0.2.8, =359, =1.0.0, =1.0.0, =2.3.4, =0.1.5, =0.1.1, =2.59.0, =3.0.0 and more Source cves: CVE-2024-32888 Source advisory: OSV:GHSA-X3WM-HFFR-CHWM...

com.netflix.metacat:metacat-connector-redshift (>=1.3.0, <=1.3.1), com.trib3:db (>=1.19.1891, <=3.1.5004) +63 more potentially affected by CVE-2024-32888 via com.amazon.redshift:redshift-jdbc42 (>=2.0.0.3, <=2.1.0.26)

com.amazon.redshift:redshift-jdbc42 MAVEN version =2.0.0.3, =1.3.0, =1.19.1891, =0.1.15-alpha, =0.1.15-alpha, =0.1.15-alpha, =6.0.0-spark3.3, =0.2.8, =359, =1.0.0, =1.0.0, =2.3.4, =0.1.5, =0.1.1, =2.59.0, =3.0.0 and more Source cves: CVE-2024-32888 Source advisory: MEND:CVE-2024-32888...

Security Bulletin: IBM Security Guardium is affected by a redshift-jdbc42-2.0.0.3.jar vulnerability (CVE-2022-41828)

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID:CVE-2022-41828 DESCRIPTION: Amazon AWS Redshift JDBC Driver could provide weaker than expected security, caused by failing to heck the class type when instantiating an object from a class name in Object Factory...

com.amazon.redshift:redshift-jdbc42 vulnerable to remote command execution

Impact A potential remote command execution issue exists within redshift-jdbc42 versions 2.1.0.7 and below. When plugins are used with the driver, it instantiates plugin instances based on Java class names provided via the sslhostnameverifier, socketFactory, sslfactory, and sslpasswordcallback...

com.trib3:db (>=1.19.1891, <=1.31.3240), io.castled:commons (>=0.1.15-alpha, <=1.0.0) +58 more potentially affected by CVE-2022-41828 via com.amazon.redshift:redshift-jdbc42 (>=2.0.0.3, <=2.1.0.7)

com.amazon.redshift:redshift-jdbc42 MAVEN version =2.0.0.3, =1.19.1891, =0.1.15-alpha, =0.1.15-alpha, =0.1.15-alpha, =0.2.8, =359, =0.1.5, =0.1.1, =2.59.0, =2.59.0, =2.59.0, =2.59.0, =2.60.0, =3.0.0 and more Source cves: CVE-2022-41828https://vulners...

Remote Code Execution (RCE)

redshift-jdbc42 is vulnerable to remote code execution. The vulnerability exists because the verifyPeerName function of MakeSSL.java does not properly check the class type when instantiating an object from a class name, allowing an attacker to inject and execute malicious code through the object...

com.trib3:db (>=1.19.1891, <=1.31.3240), io.castled:commons (>=0.1.15-alpha, <=1.0.0) +58 more potentially affected by CVE-2022-41828 via com.amazon.redshift:redshift-jdbc42 (>=2.0.0.3, <=2.1.0.7)

com.amazon.redshift:redshift-jdbc42 MAVEN version =2.0.0.3, =1.19.1891, =0.1.15-alpha, =0.1.15-alpha, =0.1.15-alpha, =0.2.8, =359, =0.1.5, =0.1.1, =2.59.0, =2.59.0, =2.59.0, =2.59.0, =2.60.0, =3.0.0 and more Source cves: CVE-2022-41828https://vulners...