arrow-pd-parser (>=1.0.0, <=1.0.4), awsdf (>=0.1.1, <=0.1.15) +36 more potentially affected by CVE-2025-5279 via redshift-connector (>=2.0.888, <=2.1.5)

redshift-connector PYPI version =2.0.888, =1.0.0, =0.1.1, =2.0.0, =0.1.17, =1.0.0a1, =0.4.0, =0.0.1, =0.3.64, =6.1.2, =0.5.2, =1.5.0b1, =0.1.0, =0.2.23, =0.0.141, =0.1.2, =0.1.4 and more Source cves: CVE-2025-5279 Source advisory: OSV:PYSEC-2026-1867...

Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin

SummaryAmazon Redshift Python Connector is a pure Python connector to Redshift i.e., driver that implements the Python Database API Specification 2.0.When the Amazon Redshift Python Connector is configured with the BrowserAzureOAuth2CredentialsProvider plugin, the driver skips the SSL certificate...

PYSEC-2026-1866 Amazon Redshift Python Connector vulnerable to SQL Injection

Summary A SQL injection in the Amazon Redshift Python Connector in version 2.1.4 allows a user to gain escalated privileges via schema injection in the getschemas, gettables, or getcolumns Metadata APIs. Users should upgrade to the driver version 2.1.5 or revert to driver version 2.1.3. Impact A...

Amazon Redshift Python Connector vulnerable to SQL Injection

SummaryA SQL injection in the Amazon Redshift Python Connector in version 2.1.4 allows a user to gain escalated privileges via schema injection in the getschemas, gettables, or getcolumns Metadata APIs. Users should upgrade to the driver version 2.1.5 or revert to driver version 2.1.3. ImpactA SQ...

dbt (0.17.0rc3), dbt-bigquery (0.17.0rc3) +3 more potentially affected by CVE-2024-36105 via dbt-core (0.17.0rc3)

dbt-core PYPI version 0.17.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.17.0rc3 - dbt-bigquery 0.17.0rc3 - dbt-postgres 0.17.0rc3 - dbt-redshift 0.17.0rc3 - dbt-snowflake 0.17.0rc3 Source cves: CVE-2024-361...

dbt (0.17.0rc4), dbt-bigquery (0.17.0rc4) +3 more potentially affected by CVE-2024-36105 via dbt-core (0.17.0rc4)

dbt-core PYPI version 0.17.0rc4 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.17.0rc4 - dbt-bigquery 0.17.0rc4 - dbt-postgres 0.17.0rc4 - dbt-redshift 0.17.0rc4 - dbt-snowflake 0.17.0rc4 Source cves: CVE-2024-361...

dbt (0.17.2b1), dbt-bigquery (0.17.2b1) +3 more potentially affected by CVE-2024-36105 via dbt-core (0.17.2b1)

dbt-core PYPI version 0.17.2b1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.17.2b1 - dbt-bigquery 0.17.2b1 - dbt-postgres 0.17.2b1 - dbt-redshift 0.17.2b1 - dbt-snowflake 0.17.2b1 Source cves: CVE-2024-36105...

dbt (0.18.1b3), dbt-bigquery (0.18.1b3) +2 more potentially affected by CVE-2024-36105 via dbt-core (0.18.1b3)

dbt-core PYPI version 0.18.1b3 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.18.1b3 - dbt-bigquery 0.18.1b3 - dbt-postgres 0.18.1b3 - dbt-redshift 0.18.1b3 Source cves: CVE-2024-36105 Source advisory:...

dbt (0.18.2), dbt-bigquery (0.18.2) +9 more potentially affected by CVE-2024-36105 via dbt-core (0.18.2)

dbt-core PYPI version 0.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.18.2 - dbt-bigquery 0.18.2 - dbt-clickhouse =0.18.2, =0.18.0rc1, =0.0.1, =0.18.1, =0.18.2 Source cves: CVE-2024-36105 Source advisory:...

dbt (0.19.1b2), dbt-bigquery (0.19.1b2) +4 more potentially affected by CVE-2024-36105 via dbt-core (0.19.1b2)

dbt-core PYPI version 0.19.1b2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.19.1b2 - dbt-bigquery 0.19.1b2 - dbt-postgres 0.19.1b2 - dbt-presto 0.19.1b2 - dbt-redshift 0.19.1b2 - dbt-spark 0.19.1b2 Source cves:...

dbt (0.19.1rc2), dbt-bigquery (0.19.1rc2) +2 more potentially affected by CVE-2024-36105 via dbt-core (0.19.1rc2)

dbt-core PYPI version 0.19.1rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.19.1rc2 - dbt-bigquery 0.19.1rc2 - dbt-postgres 0.19.1rc2 - dbt-redshift 0.19.1rc2 Source cves: CVE-2024-36105 Source advisory:...

dbt (0.20.0rc2), dbt-bigquery (0.20.0rc2) +5 more potentially affected by CVE-2024-36105 via dbt-core (0.20.0rc2)

dbt-core PYPI version 0.20.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.20.0rc2 - dbt-bigquery 0.20.0rc2 - dbt-postgres 0.20.0rc2 - dbt-presto 0.20.0rc2 - dbt-redshift 0.20.0rc2 - dbt-snowflake 0.20.0rc2 -...

dbt (0.20.2rc2), dbt-bigquery (0.20.2rc2) +5 more potentially affected by CVE-2024-36105 via dbt-core (0.20.2rc2)

dbt-core PYPI version 0.20.2rc2 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.20.2rc2 - dbt-bigquery 0.20.2rc2 - dbt-postgres 0.20.2rc2 - dbt-presto 0.20.2rc2 - dbt-redshift 0.20.2rc2 - dbt-snowflake 0.20.2rc2 -...

dbt (0.17.1rc4), dbt-bigquery (0.17.1rc4) +3 more potentially affected by CVE-2024-36105 via dbt-core (0.17.1rc4)

dbt-core PYPI version 0.17.1rc4 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.17.1rc4 - dbt-bigquery 0.17.1rc4 - dbt-postgres 0.17.1rc4 - dbt-redshift 0.17.1rc4 - dbt-snowflake 0.17.1rc4 Source cves: CVE-2024-361...

dbt (0.18.1), dbt-bigquery (0.18.1) +7 more potentially affected by CVE-2024-36105 via dbt-core (0.18.1)

dbt-core PYPI version 0.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.18.1 - dbt-bigquery 0.18.1 - dbt-duckdb 0.18.1 - dbt-mysql 0.18.1.1 - dbt-postgres 0.18.1 - dbt-presto 0.18.1 - dbt-redshift 0.18.1 -...

dbt (0.19.1rc1), dbt-bigquery (0.19.1rc1) +3 more potentially affected by CVE-2024-36105 via dbt-core (0.19.1rc1)

dbt-core PYPI version 0.19.1rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.19.1rc1 - dbt-bigquery 0.19.1rc1 - dbt-postgres 0.19.1rc1 - dbt-redshift 0.19.1rc1 - dbt-spark 0.19.1rc1 Source cves: CVE-2024-36105...

dbt (0.20.0rc1), dbt-bigquery (0.20.0rc1) +5 more potentially affected by CVE-2024-36105 via dbt-core (0.20.0rc1)

dbt-core PYPI version 0.20.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.20.0rc1 - dbt-bigquery 0.20.0rc1 - dbt-postgres 0.20.0rc1 - dbt-presto 0.20.0rc1 - dbt-redshift 0.20.0rc1 - dbt-snowflake 0.20.0rc1 -...

dbt (0.20.1rc1), dbt-bigquery (0.20.1rc1) +5 more potentially affected by CVE-2024-36105 via dbt-core (0.20.1rc1)

dbt-core PYPI version 0.20.1rc1 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.20.1rc1 - dbt-bigquery 0.20.1rc1 - dbt-postgres 0.20.1rc1 - dbt-presto 0.20.1rc1 - dbt-redshift 0.20.1rc1 - dbt-snowflake 0.20.1rc1 -...

dbt (0.16.0), dbt-bigquery (0.16.0) +7 more potentially affected by CVE-2024-36105 via dbt-core (0.16.0)

dbt-core PYPI version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on dbt-core and may be impacted: - dbt 0.16.0 - dbt-bigquery 0.16.0 - dbt-oracle =0.1.3, =0.1.0, =0.2.0 - dbt-snowflake 0.16.0 - dbt-spark 0.16.0 Source cves: CVE-2024-36105 Sour...

amazon-sagemaker-sql-editor (>=0.1.1, <=0.1.21), apache-airflow-providers-amazon (>=9.7.0rc1, <=9.8.0) +42 more potentially affected by CVE-2026-8838 via redshift-connector (>=2.0.888, <=2.1.13)

redshift-connector PYPI version =2.0.888, =0.1.1, =9.7.0rc1, =1.0.0, =0.1.1, =2.0.0, =0.1.7, =0.31.6, =0.1.17, =2.3.0.dev3, =1.0.0a1, =0.4.0, =0.0.1, =0.3.64, =6.1.2, =0.5.2, =0.6.1 and more Source cves: CVE-2026-8838 Source advisory: OSV:PYSEC-2026-521...