dbt (>=0.16.0b2, <=0.18.0b2), dbt-schema-builder (>=0.1.0, <=0.2.2) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.1)

snowflake-connector-python PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt =0.16.0b2, =0.1.0, =0.16.0b2, =0.2.0, =0.2.5 - snowshu 0.0.1b3 Source cves: CVE-2026-86597 Source...

airbyte (>=0.0.1.dev7, <=0.10.5), airbyte-lib (>=0.1.0.dev1, <=0.1.0) +6 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.6.0)

snowflake-connector-python PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - airbyte =0.0.1.dev7, =0.1.0.dev1, =1.0.23, =0.1.0, =0.1.1 - refractbatch 1.24.1 - snowflake-cli-labs 2.0.0rc...

airbyte (>=0.11.0, <=0.27.0), airbyte-destination-pgvector (>=0.1.0, <=0.1.4) +117 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.18.1)

snowflake-connector-python PYPI version 3.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - airbyte =0.11.0, =0.1.0, =0.0.1, =0.1.5, =0.1.1, =0.4.6, =0.0.25, =0.1.9, =1.0.5, =1.0.1, =2.0.2, =2.1.0 an...

dbcat (0.3.1), pipelinewise-target-snowflake (1.11.0) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.3.10)

snowflake-connector-python PYPI version 2.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbcat 0.3.1 - pipelinewise-target-snowflake 1.11.0 - pydbconnector-jinghan-ma =0.0.4, =0.0.5 Source cves:...

expert-intelligence-toolbox (>=0.0.12, <=1.0.20), landingai (>=0.0.14, <=0.2.10) +6 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.0.4)

snowflake-connector-python PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - expert-intelligence-toolbox =0.0.12, =0.0.14, =3.11.1, =0.1.0, =0.1.2 - snowflake-ai 0.1.0 Source cves:...

bobrtools (>=0.1.3, <=0.1.32), databricks-uniform-sync (>=0.3.1, <=1.1.4) +6 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.4)

snowflake-connector-python PYPI version 3.12.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - bobrtools =0.1.3, =0.3.1, =0.16.0, =0.8.0, =1.0.303, =0.0.25, =0.0.26 - snowflake-cli 3.3.0 -...

snowflake-cli-labs (>=3.0.0rc1, <=3.0.0rc2) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.1)

snowflake-connector-python PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-cli-labs =3.0.0rc1, =3.0.0rc2 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV...

aladdinsdk (>=0.0.1a4.post0, <=2.0.0b6), icsdatavalidation (>=1.0.232, <=1.0.378) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.7.1)

snowflake-connector-python PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - aladdinsdk =0.0.1a4.post0, =1.0.232, =0.2.0, =0.1.0, =0.3.0 Source cves: CVE-2026-86597 Source advisory:...

dagster-snowflake (>=0.4.0rc2, <=0.6.1) potentially affected by CVE-2026-86597 via snowflake-connector-python (1.7.11)

snowflake-connector-python PYPI version 1.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dagster-snowflake =0.4.0rc2, =0.6.1 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

monosi (>=0.0.1.post1, <=0.0.2.post5), monosi-server (0.0.1) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.2)

snowflake-connector-python PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - monosi =0.0.1.post1, =0.0.2.post5 - monosi-server 0.0.1 - snowshu 0.0.4a1 Source cves: CVE-2026-86597 Source...

aladdinsdk (>=2.0.0a3, <=2.0.0b10), snowflake-cli (3.12.0) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.17.3)

snowflake-connector-python PYPI version 3.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - aladdinsdk =2.0.0a3, =2.0.0b10 - snowflake-cli 3.12.0 - snowflake-cli-labs 3.12.0 Source cves: CVE-2026-865...

snowflake-cli (3.11.0), snowflake-cli-labs (3.11.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.17.2)

snowflake-connector-python PYPI version 3.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-cli 3.11.0 - snowflake-cli-labs 3.11.0 Source cves: CVE-2026-86597 Source advisory:...

pipelinewise-tap-snowflake (2.0.3), pipelinewise-target-snowflake (1.10.1) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.3.7)

snowflake-connector-python PYPI version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake 2.0.3 - pipelinewise-target-snowflake 1.10.1 - snowmobile =0.2.0b16, =0.2.0b25...

snowchange (>=0.0.1, <=0.0.4.post1) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.6)

snowflake-connector-python PYPI version 2.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowchange =0.0.1, =0.0.4.post1 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

target-snowflake (0.2.4) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.5)

snowflake-connector-python PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - target-snowflake 0.2.4 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

dagster-snowflake (>=0.21.8, <=0.22.3), dagster-snowflake-pandas (>=0.21.8, <=0.22.3) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.4.1)

snowflake-connector-python PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dagster-snowflake =0.21.8, =0.21.8, =0.21.8, =0.22.3 - quacker 0.6.2 Source cves: CVE-2026-86597 Source...

cadpr (>=0.1.0, <=0.1.1), nikeca (>=0.0.83, <=0.2.13) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.0.0)

snowflake-connector-python PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - cadpr =0.1.0, =0.0.83, =0.2.13 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

multi-db-query-builder (>=0.1.1, <=0.1.4) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.2.1)

snowflake-connector-python PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - multi-db-query-builder =0.1.1, =0.1.4 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

reclist (0.2.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.1.2)

snowflake-connector-python PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - reclist 0.2.0 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

Snowflake drivers writes sensitive information to logs

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...