How many CVEs does awslabs aws-athena-query-federation have?

awslabs aws-athena-query-federation has 3 published CVE records since 2026.

How many awslabs aws-athena-query-federation CVEs are in CISA KEV?

None of awslabs aws-athena-query-federation's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for awslabs aws-athena-query-federation vulnerabilities?

No awslabs aws-athena-query-federation CVEs currently have a tracked public exploit in this dataset.

Which versions of awslabs aws-athena-query-federation are affected?

43 distinct awslabs aws-athena-query-federation versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in awslabs aws-athena-query-federation CVEs?

awslabs aws-athena-query-federation's CVEs most often map to these CWE weakness types: CWE-266 (Incorrect Privilege Assignment), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-95 (Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')).

How many critical awslabs aws-athena-query-federation vulnerabilities are there?

awslabs aws-athena-query-federation has 1 critical and 1 high-severity CVEs.

What is the average severity of awslabs aws-athena-query-federation CVEs?

The average CVSS base score across awslabs aws-athena-query-federation's scored CVEs is 7.5.

awslabs aws-athena-query-federation Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every awslabs aws-athena-query-federation version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

2022.20.12 CVEs
2022.22.12 CVEs
2022.23.12 CVEs
2022.24.12 CVEs
2022.30.12 CVEs
2022.30.22 CVEs
2022.32.12 CVEs
2022.38.12 CVEs
2022.39.12 CVEs
2022.42.12 CVEs
2022.42.22 CVEs
2022.46.12 CVEs
2022.47.12 CVEs
2025.34.12 CVEs
2019.48.11 CVE
2020.04.11 CVE
2020.17.11 CVE
2020.19.11 CVE
2020.33.11 CVE
2020.4.11 CVE
2020.46.11 CVE
2020.51.11 CVE
2021.14.11 CVE
2021.18.11 CVE
2021.21.11 CVE
2021.27.11 CVE
2021.30.11 CVE
2021.33.11 CVE
2021.37.11 CVE
2021.41.11 CVE
2021.42.11 CVE
2021.49.11 CVE
2021.49.21 CVE
2021.51.11 CVE
2021.6.11 CVE
2022.02.11 CVE
2022.10.11 CVE
2022.2.11 CVE
2022.4.11 CVE
2022.7.11 CVE
2026.19.11 CVE

Fixed in

51a8dc146b084e96ad8d14c07e4793c2ff7ad0211 CVE
6a4f15a93f62a0ddf9e6f41bd2bbd5c661e8370c1 CVE

Find a version

3 CVEs

Sort

Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector
CVE-2026-77810
Patch
CWE-95
Critical · CVSS 9.4
EPSS 0.3% (28th pct)2026-08-21
Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template
CVE-2026-75910
Patch
CWE-266
High · CVSS 7.1
EPSS 0.4% (30th pct)2026-08-20
SQL injection in Amazon Athena Synapse connector
CVE-2026-12283
Patch
CWE-89
Medium · CVSS 6.1
EPSS 0.6% (46th pct)2026-07-17

awslabs aws-athena-query-federation Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Fixed in

Common weakness types

Other awslabs products

Frequently asked questions

References

Track awslabs aws-athena-query-federation vulnerabilities