snowflake-sqlalchemy (>=1.0.9, <=1.1.14), target-snowflake (0.0.2) potentially affected by CVE-2026-86597 via snowflake-connector-python (1.9.1)

snowflake-connector-python PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-sqlalchemy =1.0.9, =1.1.14 - target-snowflake 0.0.2 Source cves: CVE-2026-86597 Source advisory:...

PYSEC-2026-3921 Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

snowflake-sqlalchemy (>=1.0.9, <=1.1.14), target-snowflake (0.0.2) potentially affected by CVE-2026-15925 via snowflake-connector-python (1.9.1)

snowflake-connector-python PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-sqlalchemy =1.0.9, =1.1.14 - target-snowflake 0.0.2 Source cves: CVE-2026-15925 Source advisory:...

SQL Injection

Overview snowflake-sqlalchemy is a Snowflake SQLAlchemy Dialect Affected versions of this package are vulnerable to SQL Injection via improper handling of user-supplied input in merge operations and table creation queries. An attacker can execute unauthorized SQL commands or read arbitrary files ...

alchemy-modelgen (>=0.1.6, <=0.1.6.1), altimate-dataminion (>=0.0.1, <=0.2.5) +53 more potentially affected by CVE-2026-15736 via snowflake-sqlalchemy (>=1.2.0, <=1.9.0)

snowflake-sqlalchemy PYPI version =1.2.0, =0.1.6, =0.0.1, =1.0.0, =1.0.0rc1, =0.1.0, =1.0.1, =0.5.1, =1.0.5, =2.15.2, =0.2.1, =0.1.1, =0.1.0, =0.1.0a4, =0.2.31rc2, =0.0.7, =0.3.3 and more Source cves: CVE-2026-15736 Source advisory: SNYK:PYTHON-SNOWFLAKESQLALCHEMY-17972388...

GHSA-8G6F-QW9X-4Q6Q Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

alchemy-modelgen (>=0.1.6, <=0.1.6.1), altimate-dataminion (>=0.0.1, <=0.2.5) +53 more potentially affected by CVE-2026-15736 via snowflake-sqlalchemy (>=1.2.0, <=1.9.0)

snowflake-sqlalchemy PYPI version =1.2.0, =0.1.6, =0.0.1, =1.0.0, =1.0.0rc1, =0.1.0, =1.0.1, =0.5.1, =1.0.5, =2.15.2, =0.2.1, =0.1.1, =0.1.0, =0.1.0a4, =0.2.31rc2, =0.0.7, =0.3.3 and more Source cves: CVE-2026-15736 Source advisory: GHSA-8G6F-QW9X-4Q6Q...

Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

CVE-2026-15736

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

EUVD-2026-43679

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

CVE-2026-15736 Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemy

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

CVE-2026-15736

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

CVE-2026-15736 Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemy

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

CVE-2026-15736 Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemy

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

CVE-2026-15736

Snowflake SQLAlchemy

alchemy-modelgen (>=0.1.6, <=0.1.6.1), altimate-dataminion (>=0.0.1, <=0.2.5) +53 more potentially affected by CVE-2026-15736 via snowflake-sqlalchemy (>=1.2.0, <=1.9.0)

snowflake-sqlalchemy PYPI version =1.2.0, =0.1.6, =0.0.1, =1.0.0, =1.0.0rc1, =0.1.0, =1.0.1, =0.5.1, =1.0.5, =2.15.2, =0.2.1, =0.1.1, =0.1.0, =0.1.0a4, =0.2.31rc2, =0.0.7, =0.3.3 and more Source cves: CVE-2026-15736 Source advisory: MEND:CVE-2026-15736...

PT-2026-58028

Name of the Vulnerable Software and Affected Versions Snowflake SQLAlchemy versions prior to 1.11.0 Description Multiple security issues exist in the library. Improper handling of user-supplied column identifiers during merge operations allows SQL injection via attacker-controlled input keys, whi...

CVE-2026-15736: Improper Neutralization of Special Elements used in an SQL Command

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

PT-2026-85344

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...