Threats affecting pkg:pypi/awswrangler

CVE-2026-118029 affects the AWS SDK for pandas (awswrangler) Athena module. The vulnerability involves unverified ownership of the default Athena query result location, which could allow a remote user to read query results and tamper with them if a pre-created S3 bucket is used. Versions of awswrangler prior to 3.16.1 are impacted. AWS has published a security bulletin advising attention to this issue.