AWS CDK Redshift Module Vulnerable to SQL Injection Attack

AWS Cloud Development Kit's @aws-cdk/aws-redshift-alpha module has a critical SQL injection vulnerability (CVE-2026-115418) affecting versions below 2.274.0-alpha.0. Attackers who can control construct properties like usernames, comments, or passwords could execute arbitrary SQL with superuser privileges, potentially granting unauthorized cluster access. If you're using this module, update immediately—this one requires your action.