GHSA-7wq2-32h4-9hc9 AWS Advanced Go Wrapper: Privilege Escalation in Aurora PostgreSQL Instance

• Go github.com/aws/aws-advanced-go-wrapper/awssql: < 1.1.1 → fixed in 1.1.1 • Go github.com/aws/aws-advanced-go-wrapper/auth-helpers: < 1.0.2 → fixed in 1.0.2 • Go github.com/aws/aws-advanced-go-wrapper/aws-secrets-manager: < 1.0.2 → fixed in 1.0.2 • Go github.com/aws/aws-advanced-go-wrapper/federated-auth: < 1.0.2 → fixed in 1.0.2 • Go github.com/aws/aws-advanced-go-wrapper/iam: < 1.0.2 → fixed in 1.0.2 • Go github.com/aws/aws-advanced-go-wrapper/mysql-driver: < 1.0.2 → fixed in 1.0.2 • Go github.com/aws/aws-advanced-go-wrapper/okta: < 1.0.2 → fixed in 1.0.2 • Go github.com/aws/aws-advanced-go-wrapper/otlp: < 1.0.2 → fixed in 1.0.2 • Go github.com/aws/aws-advanced-go-wrapper/pgx-driver: < 1.0.2 → fixed in 1.0.2 • Go github.com/aws/aws-advanced-go-wrapper/xray: < 1.0.2 → fixed in 1.0.2

Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users. We recommend customers upgrade to the following versions: AWS Go Wrapper to 2025-10-17 Source of Vulnerability Report: Allistair Ishmael Hakim [email protected] Affected products & versions: AWS Go Wrapper < 2025-10-17 Platforms: MacOS/Windows/Linux