Количество 2
Количество 2
CVE-2026-8838
Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-middle actor to execute arbitrary code on the client. To remediate this issue, users should upgrade to version 2.1.14.
GHSA-29h4-r29x-hchv
amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-8838 Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-middle actor to execute arbitrary code on the client. To remediate this issue, users should upgrade to version 2.1.14. | CVSS3: 9.8 | 1% Низкий | 2 месяца назад |
| GHSA-29h4-r29x-hchv amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection | CVSS3: 9.8 | 1% Низкий | 2 месяца назад |
Уязвимостей на страницу