https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:40:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-271738 EUVD-2026-271738 https://cve.radiocsirt.org/vuln/euvd-2026-271738 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12967 <p>An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users.</p> <p>We recommend customers upgrade to the following versions: AWS JDBC Wrapper to v2.6.5, AWS Go Wrapper to 2025-10-17, AWS NodeJS Wrapper to v2.0.1, AWS Python Wrapper to v1.4.0 and AWS PGSQL ODBC driver to v1.0.1</p> <p>An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users.</p> <p>We recommend customers upgrade to the following versions: AWS JDBC Wrapper to v2.6.5, AWS Go Wrapper to 2025-10-17, AWS NodeJS Wrapper to v2.0.1, AWS Python Wrapper to v1.4.0 and AWS PGSQL ODBC driver to v1.0.1</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-12967 https://cve.radiocsirt.org/vuln/ghsa-4jvf-wx3f-2x8q <p><strong>Affected:</strong> PyPI: aws_advanced_python_wrapper</p> <p>### Description of Vulnerability:</p> <p>An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users.</p> <p>AWS recommends customers upgrade to the following versions: AWS Python Wrapper to v1.4.0</p> <p>### Source of Vulnerability Report: Allistair Ishmael Hakim &lt;allistair.hakim@gmail.com&gt;</p> <p>### Affected products &amp; versions: AWS Python Wrapper &lt; 1.4.0</p> <p>### Platforms: MacOS/Windows/Linux</p> <p><strong>Affected:</strong> PyPI: aws_advanced_python_wrapper</p> <p>### Description of Vulnerability:</p> <p>An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users.</p> <p>AWS recommends customers upgrade to the following versions: AWS Python Wrapper to v1.4.0</p> <p>### Source of Vulnerability Report: Allistair Ishmael Hakim &lt;allistair.hakim@gmail.com&gt;</p> <p>### Affected products &amp; versions: AWS Python Wrapper &lt; 1.4.0</p> <p>### Platforms: MacOS/Windows/Linux</p> https://cve.radiocsirt.org/vuln/ghsa-4jvf-wx3f-2x8q https://cve.radiocsirt.org/vuln/pysec-2026-1205 <p><strong>Affected:</strong> PyPI: aws-advanced-python-wrapper</p> <p>### Description of Vulnerability:</p> <p>An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users.</p> <p>AWS recommends customers upgrade to the following versions: AWS Python Wrapper to v1.4.0</p> <p>### Source of Vulnerability Report: Allistair Ishmael Hakim &lt;allistair.hakim@gmail.com&gt;</p> <p>### Affected products &amp; versions: AWS Python Wrapper &lt; 1.4.0</p> <p>### Platforms: MacOS/Windows/Linux</p> <p><strong>Affected:</strong> PyPI: aws-advanced-python-wrapper</p> <p>### Description of Vulnerability:</p> <p>An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users.</p> <p>AWS recommends customers upgrade to the following versions: AWS Python Wrapper to v1.4.0</p> <p>### Source of Vulnerability Report: Allistair Ishmael Hakim &lt;allistair.hakim@gmail.com&gt;</p> <p>### Affected products &amp; versions: AWS Python Wrapper &lt; 1.4.0</p> <p>### Platforms: MacOS/Windows/Linux</p> https://cve.radiocsirt.org/vuln/pysec-2026-1205