Vulnerabilities for redshift-connector

First version without a known vulnerability: 2.1.14

Details

• GHSA-29h4-r29x-hchv2026-05-29

  amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection

  Fixed in: 2.1.14

• GHSA-r244-wg5g-6w2r2025-05-28

  Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin

  Fixed in: 2.1.7

• GHSA-8gc2-vq6m-rwjw2024-12-26

  Amazon Redshift Python Connector vulnerable to SQL Injection

  Fixed in: 2.1.5