Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

PyPI package

aws-advanced-python-wrapper

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. High, CVSS 8.6PyPIAmendedPublished

    AWS Advanced Python Wrapper: Privilege Escalation in Aurora PostgreSQL instance

    CVE-2025-12967 · GHSA-4jvf-wx3f-2x8q

    Affected
    • PyPI aws-advanced-python-wrapper < 1.4.0
    Fixed in
    1.4.0· Vendor fix available
    Issue
    of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users. AWS recommends customers upgrade to the following versions: AWS Python Wrapper to v1.4.0 Source of Vulnerability Report: Allistair Ishmael Hakim <allistair.hakim@gmail.com Affected products & versions: AWS Python Wrapper < 1.4.0 Platforms: MacOS/Windows/Linux

    Recommended action: Upgrade to 1.4.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:osv.dev (1)github.com (2)Source checked Evidence →