@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +291 more potentially affected by CVE-2026-100723 via vm2 (>=3.0.0, <=3.11.6)

vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...

pipelinewise-tap-snowflake (2.0.1), snowday (>=0.1.3, <=0.1.5) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.9)

snowflake-connector-python PYPI version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake 2.0.1 - snowday =0.1.3, =0.1.5 Source cves: CVE-2026-86597 Source advisory:...

io.apiman:apiman-manager-api-jpa (>=3.0.0.rc6, <=3.1.3.final), io.apiman:apiman-manager-api-micro (>=3.0.0.rc6, <=3.1.3.final) +8 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.21)

net.snowflake:snowflake-jdbc MAVEN version 3.13.21 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.apiman:apiman-manager-api-jpa =3.0.0.rc6, =3.0.0.rc6, =3.0.0.rc6, =3.0.0.rc6, =4.15.0, =16.17.1,...

net.snowflake:spark-snowflake_2.11 (>=2.7.2-spark_2.2, <=2.7.2-spark_2.4), net.snowflake:spark-snowflake_2.12 (2.7.2-spark_2.4) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.12.7)

net.snowflake:snowflake-jdbc MAVEN version 3.12.7 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.11 =2.7.2-spark2.2, =2.7.2-spark2.4 - net.snowflake:spark-snowflake2.12...

snowflake-cli-labs (>=3.0.0rc1, <=3.0.0rc2) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.1)

snowflake-connector-python PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-cli-labs =3.0.0rc1, =3.0.0rc2 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV...

piicatcher (>=0.10.1, <=0.12.1) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.7)

snowflake-connector-python PYPI version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - piicatcher =0.10.1, =0.12.1 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

com.linkedin.feathr:feathr_2.12 (>=0.1.0, <=0.1.1), com.snowflake:snowpark (>=1.2.0, <=1.7.2) +12 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.14)

net.snowflake:snowflake-jdbc MAVEN version 3.13.14 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.linkedin.feathr:feathr2.12 =0.1.0, =1.2.0, =0.2.10, =0.2.10, =2.3.0, =0.0.8, =2.9.3-spark2.4,...

net.snowflake:spark-snowflake_2.10 (>=2.4.5-spark_2.1, <=2.4.8-spark_2.2), net.snowflake:spark-snowflake_2.11 (>=2.4.5, <=2.4.8-spark_2.4_pre_release) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.6.8)

net.snowflake:snowflake-jdbc MAVEN version 3.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.10 =2.4.5-spark2.1, =2.4.5, =2.4.8-spark2.4prerelease Source cves:...

us.fatehi:schemacrawler-examplecode (16.19.11), us.fatehi:schemacrawler-jdbc-drivers (16.19.11) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.32)

net.snowflake:snowflake-jdbc MAVEN version 3.13.32 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - us.fatehi:schemacrawler-examplecode 16.19.11 - us.fatehi:schemacrawler-jdbc-drivers 16.19.11 -...

aladdinsdk (>=0.0.1a4.post0, <=2.0.0b6), icsdatavalidation (>=1.0.232, <=1.0.378) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.7.1)

snowflake-connector-python PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - aladdinsdk =0.0.1a4.post0, =1.0.232, =0.2.0, =0.1.0, =0.3.0 Source cves: CVE-2026-86597 Source advisory:...

com.datasqrl:sqrl-discovery (>=0.9.0-alpha1, <=0.9.1), com.datasqrl:sqrl-planner (>=0.9.0-alpha1, <=0.9.1) +12 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.27.1)

net.snowflake:snowflake-jdbc MAVEN version 3.27.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.datasqrl:sqrl-discovery =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =12.49.0, =12.49.0, =12.49.0,...

dagster-snowflake (>=0.6.4rc0, <=0.6.5), data-lineage (>=0.5.1, <=0.9.0) +6 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.0.1)

snowflake-connector-python PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dagster-snowflake =0.6.4rc0, =0.5.1, =0.8.3, =1.0.7, =2.43.2, =0.16.0, =0.1.0.dev3, =0.1.2 Source cves:...

unskript-cloudnative-observability (>=0.1.4, <=1.0.1456) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.6)

snowflake-connector-python PYPI version 2.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - unskript-cloudnative-observability =0.1.4, =1.0.1456 Source cves: CVE-2026-86597 Source advisory:...

net.snowflake:spark-snowflake_2.10 (2.4.14-spark_2.2), net.snowflake:spark-snowflake_2.11 (>=2.4.14-spark_2.2, <=2.4.14-spark_2.4) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.8.0)

net.snowflake:snowflake-jdbc MAVEN version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.10 2.4.14-spark2.2 - net.snowflake:spark-snowflake2.11 =2.4.14-spark2.2,...

io.squashql:squashql-snowflake (>=1.4.0, <=1.4.2), org.eclipse.dirigible:dirigible-application (>=8.16.0, <=8.18.4) +4 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.14.2)

net.snowflake:snowflake-jdbc MAVEN version 3.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.squashql:squashql-snowflake =1.4.0, =8.16.0, =16.20.5, =16.20.5, =16.20.5, =16.20.5, =16.20.6 Sourc...

com.linkedin.iceberg:iceberg-snowflake (>=v1.2.0.1-1-gadc43b8, <=1.2.0.25), dev.ocpd.liquibase.ext:liquibase-hibernate5 (4.18.0-b6) +12 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.22)

net.snowflake:snowflake-jdbc MAVEN version 3.13.22 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.linkedin.iceberg:iceberg-snowflake =v1.2.0.1-1-gadc43b8, =9.15.2, =0.5.0, =2.11.0-spark3.1,...

net.snowflake:spark-snowflake_2.11 (>=2.5.6-spark_2.2, <=2.5.6-spark_2.4), net.snowflake:spark-snowflake_2.12 (2.5.6-spark_2.4) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.11.0)

net.snowflake:snowflake-jdbc MAVEN version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.11 =2.5.6-spark2.2, =2.5.6-spark2.4 - net.snowflake:spark-snowflake2.12...

be.ugent.idlab.knows:algebraic-mapping-operators (>=5.0.1, <=5.1.0), be.ugent.idlab.knows:dataio (>=2.1.5, <=2.4.1) +17 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.23.1)

net.snowflake:snowflake-jdbc MAVEN version 3.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - be.ugent.idlab.knows:algebraic-mapping-operators =5.0.1, =2.1.5, =2.11.0, =2.11.0, =2.11.0, =2.11.0,...

net.snowflake:spark-snowflake_2.10 (>=2.2.7, <=2.3.3-spark_2.2), net.snowflake:spark-snowflake_2.11 (>=2.2.7, <=2.3.3-spark_2.2) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.2.6)

net.snowflake:snowflake-jdbc MAVEN version 3.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.10 =2.2.7, =2.2.7, =2.3.3-spark2.2 Source cves: CVE-2026-86597 Source...

apache-airflow-providers-snowflake (>=2.4.0rc1, <=2.5.1), rcd-dev-kit (>=0.0.11, <=1.1.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.1)

snowflake-connector-python PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - apache-airflow-providers-snowflake =2.4.0rc1, =0.0.11, =1.1.0 Source cves: CVE-2026-86597 Source advisory:...