CVE-2023-34233_Proof_OF_Concept

Snowflake Connector CVE-2025-24793 PoC This repository contains Proof of Concept PoC code for testing CVE-2025-24793 vulnerability in Snowflake Connector for Python. The project includes both patched and unpatched versions to demonstrate the vulnerability and its fix. Prerequisites Docker install...

airbyte (>=0.11.0, <=0.27.0), airbyte-destination-pgvector (>=0.1.0, <=0.1.4) +117 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.18.1)

snowflake-connector-python PYPI version 3.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - airbyte =0.11.0, =0.1.0, =0.0.1, =0.1.5, =0.1.1, =0.4.6, =0.0.25, =0.1.9, =1.0.5, =1.0.1, =2.0.2, =2.1.0 an...

dagster-snowflake (>=0.21.8, <=0.22.3), dagster-snowflake-pandas (>=0.21.8, <=0.22.3) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.4.1)

snowflake-connector-python PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dagster-snowflake =0.21.8, =0.21.8, =0.21.8, =0.22.3 - quacker 0.6.2 Source cves: CVE-2026-86597 Source...

omnata-cli (>=0.1.8, <=0.1.12), omnata-plugin-devkit (>=0.1.2, <=0.1.95) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.2.0)

snowflake-connector-python PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - omnata-cli =0.1.8, =0.1.2, =0.0.16, =0.0.1a2, =1.1.1, =1.2.5 Source cves: CVE-2026-86597 Source advisory:...

acepolicies (>=0.1.17, <=0.1.23), cloe-extensions-snowflake-policies (>=20241210.4.0, <=20250324.2.0) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.1.0)

snowflake-connector-python PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - acepolicies =0.1.17, =20241210.4.0, =20250324.2.0 - snowflake-cli-labs 1.1.0 Source cves: CVE-2026-86597...

dataligo (0.7.3), udps (0.1.21) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.0.2)

snowflake-connector-python PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dataligo 0.7.3 - udps 0.1.21 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

cadpr (>=0.1.0, <=0.1.1), nikeca (>=0.0.83, <=0.2.13) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.0.0)

snowflake-connector-python PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - cadpr =0.1.0, =0.0.83, =0.2.13 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

aladdinsdk (>=2.0.0b7, <=2.0.0b8), clearner (>=1.0.1, <=1.0.3) +12 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.15.0)

snowflake-connector-python PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - aladdinsdk =2.0.0b7, =1.0.1, =1.0.12, =2.1.5, =1.0.0, =0.0.2, =0.0.1, =3.7.2, =3.7.2, =0.9.1, =0.10.0 -...

dataops-testgen (>=3.7.1, <=4.1.3), keep-mirror (0.54.2) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.13.1)

snowflake-connector-python PYPI version 3.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dataops-testgen =3.7.1, =4.1.3 - keep-mirror 0.54.2 - rai-workflow-manager 0.0.52 Source cves: CVE-2026-865...

crumblpy (>=1.0.10, <=1.0.11), dataops-testgen (>=3.0.0, <=3.1.2) +6 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.3)

snowflake-connector-python PYPI version 3.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - crumblpy =1.0.10, =3.0.0, =2.1.0, =3.2.0, =3.2.0, =0.10.21, =0.11.1 Source cves: CVE-2026-86597 Source...

acedeploy (>=2.4.15, <=2.4.115), covalent-blueprints-ai (>=0.4.0, <=0.5.0rc1) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.2)

snowflake-connector-python PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - acedeploy =2.4.15, =0.4.0, =3.0.1, =3.0.0rc3, =3.1.0 - tulona 0.12.0 Source cves: CVE-2026-86597 Source...

snowflake-cli-labs (>=3.0.0rc1, <=3.0.0rc2) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.1)

snowflake-connector-python PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-cli-labs =3.0.0rc1, =3.0.0rc2 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

inthub-cli (>=0.1.4, <=0.1.26), omnata-plugin-devkit (>=0.5.3, <=0.11.0) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.0)

snowflake-connector-python PYPI version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - inthub-cli =0.1.4, =0.5.3, =0.5.0a112, =0.11.9 - snowflake-cli-labs 3.0.0rc0 Source cves: CVE-2026-86597...

clope (0.1.2), datus-agent-clickzetta (>=0.2.1, <=0.2.2) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.11.0)

snowflake-connector-python PYPI version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - clope 0.1.2 - datus-agent-clickzetta =0.2.1, =2.6.0.dev0, =2.8.2 Source cves: CVE-2026-86597 Source advisor...

aladdinsdk (>=0.0.1a4.post0, <=2.0.0b6), icsdatavalidation (>=1.0.232, <=1.0.378) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.7.1)

snowflake-connector-python PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - aladdinsdk =0.0.1a4.post0, =1.0.232, =0.2.0, =0.1.0, =0.3.0 Source cves: CVE-2026-86597 Source advisory:...

dbt-schema-builder (>=0.4.3, <=0.4.4), dbt-snowflake (>=1.0.0rc1, <=1.0.1) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.10)

snowflake-connector-python PYPI version 2.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt-schema-builder =0.4.3, =1.0.0rc1, =0.1.1, =0.2.7 - elementary-lineage 0.1.0 Source cves: CVE-2026-86597...

unskript-cloudnative-observability (>=0.1.4, <=1.0.1456) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.6)

snowflake-connector-python PYPI version 2.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - unskript-cloudnative-observability =0.1.4, =1.0.1456 Source cves: CVE-2026-86597 Source advisory:...

snowbim (>=1.0.7, <=1.0.10) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.4.3)

snowflake-connector-python PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowbim =1.0.7, =1.0.10 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

pipelinewise-target-snowflake (1.11.1), rappiflow-dag-operators (>=0.2.6, <=0.3.1) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.4.1)

snowflake-connector-python PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake 1.11.1 - rappiflow-dag-operators =0.2.6, =0.3.1 Source cves: CVE-2026-86597...

target-snowflake (0.0.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (1.8.7)

snowflake-connector-python PYPI version 1.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - target-snowflake 0.0.0 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...