AWS Advanced Go Wrapper vulnerabilities

2 known vulnerabilities in AWS Advanced Go Wrapper from AWS. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  aws-advanced-go-wrapper: Untrusted Search Path

  CVE-2026-126793Nov 12, 2026AWS

  An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 (awssql/v2.0.0) and before release 2026-07-29 (awssql/v2.0.3) could allow a remote authenticated user to escalate privileges to those o

• 8.0 High severity

  AWS Advanced Go Wrapper: Untrusted Search Path

  CVE-2026-11401Jun 5, 2026AWS

  An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced Go Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to escalate privileges to those of another Amazon RDS user, including rds_superuser, vi