RHLW-2026-e55917197c1c0c35: Lightwell Security Advisory: pyathena 3.30.1+rhlw.1
Published Nov 10, 2026
·Updated
Red Hat Lightwell has released pyathena 3.30.1+rhlw.1 with a backported security fix.
CVE-2026-65321: PyAthena SQL Injection via DefaultParameterFormatter DELETE/CTAS
This patched artifact is a drop-in replacement for pyathena 3.30.1 from PyPI.
Affected Software
1 affected componentFixes available
red-hat-lightwell/pyathena<3.30.1+rhlw.1
3.30.1+rhlw.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
red-hat-lightwell/pyathenato a version that resolves this vulnerability.Fixed in 3.30.1+rhlw.1 - Upgrade
Upgrade
pyathenato a version that resolves this vulnerability.Fixed in 3.30.1+rhlw.1
Event History
Nov 10, 2026
Advisory Published
via OSV·04:05 PM
Data Sourced
via OSV·04:05 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What should teams using pyathena 3.30.1 from PyPI deploy to address this issue?
Deploy Red Hat Lightwell pyathena 3.30.1+rhlw.1. It contains a backported security fix for CVE-2026-65321.
2
Will replacing pyathena 3.30.1 require application changes?
The patched 3.30.1+rhlw.1 artifact is described as a drop-in replacement for pyathena 3.30.1 from PyPI.