AWS SDK for pandas Vulnerability Allows Unauthorized Table Access

Apache Iceberg in awswrangler versions 3.5.2 through 3.17.1 has a critical SQL injection flaw in identifier quoting. An authenticated user with Glue Data Catalog permissions could exploit this to read restricted tables or modify privileged data via crafted column names. Update to version 3.17.1 or later immediately if you're using affected versions.