Improper Validation of Certificate with Host Mismatch

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch in the TLS certificate verification process. An attacker can intercept sensitive data, tamper with queries, or execute...

acedeploy (>=2.4.15, <=2.4.366.dev1), acepolicies (>=0.1.17, <=0.1.23) +188 more potentially affected by CVE-2026-15925 via snowflake-connector-python (>=1.7.11, <=3.18.0)

snowflake-connector-python PYPI version =1.7.11, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =1.0.6, =2.4.0rc1, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =1.13.29 and more Source cves: CVE-2026-15925 Source advisory: MEND:CVE-2026-15925...

analytics-agent-connector-snowflake (>=0.1.0, <=0.4.0), apache-airflow-backport-providers-snowflake (>=2020.5.20rc1, <=2021.3.13) +30 more potentially affected by CVE-2026-15925 via snowflake-connector-python (>=4.0.0, <=4.7.0)

snowflake-connector-python PYPI version =4.0.0, =0.1.0, =2020.5.20rc1, =1.0.0b2, =0.185.0, =1.0.3, =1.0.0, =0.1.0, =1.10.7, =1.2.1, =2.79.1a0, =3.0.0, =3.0.1.post1 - klondike 0.3.0 - lib2dlp 0.0.10 and more Source cves: CVE-2026-15925 Source advisory: MEND:CVE-2026-15925...

PT-2026-60425

Name of the Vulnerable Software and Affected Versions Snowflake Connector for Python versions prior to 4.7.1 Snowflake Connector for Python versions prior to 3.18.1 Description Improper TLS hostname verification allows a network-positioned attacker to bypass certificate hostname validation on HTT...

santoku (>=200902.10.0, <=201111.17.0) potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.5)

mysql-connector-python PYPI version 8.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - santoku =200902.10.0, =201111.17.0 Source cves: CVE-2024-21272 Source advisory: OSV:PYSEC-2026-1685...

botsislabutils (1.0.0), pxtextmining (>=0.2.5, <=0.4.2) +1 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.23)

mysql-connector-python PYPI version 8.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - botsislabutils 1.0.0 - pxtextmining =0.2.5, =0.4.2 - tweetle 1.0.1 Source cves: CVE-2024-21272 Source advisory:...

opengamedata-api-utils (>=1.1.0, <=1.1.1), opengamedata-common (>=0.0.1, <=1.2.2) +2 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.25)

mysql-connector-python PYPI version 8.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - opengamedata-api-utils =1.1.0, =0.0.1, =1.0.0.dev782, =1.0.0.dev782, =7.1.2 Source cves: CVE-2024-21272 Source...

afs2-datasource (>=3.8.0.0, <=3.8.2), base-automation (>=0.0.2, <=0.0.8) +2 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.26)

mysql-connector-python PYPI version 8.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - afs2-datasource =3.8.0.0, =0.0.2, =2.1.0b12, =0.1.4, =1.0.1456 Source cves: CVE-2024-21272 Source advisory:...

azelia-hash (>=0.1.0, <=0.1.1), core-test-utils (1.0.0) +3 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.27)

mysql-connector-python PYPI version 8.0.27 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - azelia-hash =0.1.0, =1.0.1, =1.0.2, =2.0.0b2, =2.0.0rc2 Source cves: CVE-2024-21272 Source advisory:...

allsql (>=0.0.1, <=0.0.5), bribrain (>=1.0.3, <=1.3.6) +5 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.28)

mysql-connector-python PYPI version 8.0.28 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - allsql =0.0.1, =1.0.3, =0.3.0, =0.0.6, =1.0.1, =2.0.0rc3, =2.0.5 Source cves: CVE-2024-21272 Source advisory:...

brad-agent (>=0.1.33, <=0.1.34), dbt-databend (1.1.0) +21 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.29)

mysql-connector-python PYPI version 8.0.29 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - brad-agent =0.1.33, =1.4.1, =0.3.0, =1.5.0a1, =2.1.0, =1.1.0, =0.0.1.1, =0.3.8, =6.12.1, =0.0.1, =0.0.3 -...

burgos (>=0.0.4, <=2.2.1), configops (>=0.1.5, <=0.2.3) +3 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.30)

mysql-connector-python PYPI version 8.0.30 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - burgos =0.0.4, =0.1.5, =3.0.4, =3.5.6 - wwdtm 2.0.7 Source cves: CVE-2024-21272 Source advisory: OSV:PYSEC-2026-168...

anoteai (>=0.10.0, <=0.20.0), celery-director (>=0.7.0, <=0.10.0) +9 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.31)

mysql-connector-python PYPI version 8.0.31 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - anoteai =0.10.0, =0.7.0, =1.3.0, =3.0.0, =1.0.0b27, =1.0.0, =1.0.1, =4.0.0a0, =4.0.1a0 - wwdtm 2.0.8 Source cves:...

blackline-mysql (>=0.1.0a0, <=0.1.2), csv-db-loader (1.0.0) +6 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.32)

mysql-connector-python PYPI version 8.0.32 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - blackline-mysql =0.1.0a0, =0.0.1, =0.0.1, =0.0.3, =0.80.0, =0.3.8, =0.3.18 Source cves: CVE-2024-21272 Source...

boatbuddy (>=0.5.6, <=0.12.0), ctpysql (>=0.0.1, <=0.0.2) +37 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.33)

mysql-connector-python PYPI version 8.0.33 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - boatbuddy =0.5.6, =0.0.1, =0.2.0, =1.0.1, =0.18.0.1, =1.0.0, =1.0.0, =1.2.0, =0.1.0.dev20230322, =0.0.1, =1.3.1,...

agixt (>=1.4.20, <=1.4.42), bepatient-db (0.4.0) +13 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.1.0)

mysql-connector-python PYPI version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - agixt =1.4.20, =0.0.107, =0.0.2, =0.0.3, =0.0.1, =1.0.0, =0.1.0, =0.4.3, =0.0.1, =0.0.0, =0.0.7 - wolf-core 2.0.1...

alphadb (>=1.0.0b1, <=1.0.0b19), autopilotml (>=1.0.1, <=1.0.14) +6 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.2.0)

mysql-connector-python PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - alphadb =1.0.0b1, =1.0.1, =0.0.11, =0.0.1, =0.2.3, =2.5.0, =2.11.0 Source cves: CVE-2024-21272 Source advisory:...

bobrtools (>=0.1.22, <=0.1.32), dataloom (>=1.0.0, <=2.4.2) +12 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.3.0)

mysql-connector-python PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - bobrtools =0.1.22, =1.0.0, =2.0.0, =1.0.33, =1.0.6, =2.1.9, =3.7.5, =0.0.0, =0.0.10, =1.0.2, =1.0.3 Source cves:...

ai-runner-hjy (>=0.0.1, <=0.0.3), aimanager-hjy (>=0.1.1, <=0.3.0) +124 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.4.0)

mysql-connector-python PYPI version 8.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - ai-runner-hjy =0.0.1, =0.1.1, =2.1.1rc1, =1.0.12, =0.1.0, =1.0.0a2, =0.4.2, =0.10.5, =0.21.0, =0.1.0b0, =0.1.0b0,...

afw (>=0.0.6, <=0.0.21), buckets (>=1.0.6, <=1.0.14) +16 more potentially affected by CVE-2024-21272 via mysql-connector-python (9.0.0)

mysql-connector-python PYPI version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - afw =0.0.6, =1.0.6, =0.2.1, =0.1.0, =0.8.0, =1.0.0, =0.2.19, =0.0.0, =0.1.0, =0.0.1, =0.0.2, =0.0.5 - privacysherloc...