Threats affecting pkg:pypi/aws-sdk-pandas

CVE-2026-118029 is a vulnerability in the Athena module of AWS SDK for pandas (awswrangler) before version 3.16.1. It involves unverified ownership of the default query result location, which could allow remote actors to read Athena query results and tamper with the results by exploiting a pre-created S3 bucket. The issue is fixed in version 3.16.1. Users are advised to upgrade and verify ownership of the default Athena result bucket or set explicit result locations.