amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection
Source: Advisories.Gitlab
Published:
<p>amazon-redshift-python-driver is the official Python connector for Amazon Redshift. In versions 2.1.13 and earlier, the driver insufficiently validates data received from the server during query result processing. A rogue server or man-in-the-middle could leverage this to execute arbitrary code o