Threats affecting pkg:maven/com.amazon.redshift/amazon-redshift-jdbc-driver

CVE-2026-119084 is a high-severity vulnerability in the Amazon Redshift JDBC Driver before version 2.3.0. It involves unsafe reflection in handling connection parameters and AWS credentials profiles, which could allow an attacker who can influence these inputs to execute arbitrary code within the application context if a suitable class is present on the classpath. AWS has fixed this issue in version 2.3.0 and later.