cloeextensions (>=20231128.1.0, <=20240129.2.0), core-db (1.0.0) +5 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.5.0)

snowflake-connector-python PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - cloeextensions =20231128.1.0, =4.3.0, =0.5.1, =0.2.1, =0.1.0, =0.2.1 - snowflake-cli-labs 2.0.0a1 Source cve...

enterprise-integrated-channels (0.1.30), omnata-cli (>=0.1.3, <=0.2.0) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.7.0)

snowflake-connector-python PYPI version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - enterprise-integrated-channels 0.1.30 - omnata-cli =0.1.3, =0.3.30, =2.0.0rc1, =2.1.2 Source cves:...

cafex (1.0.0), cafex-db (1.0.0) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.8.1)

snowflake-connector-python PYPI version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - cafex 1.0.0 - cafex-db 1.0.0 - snowflake-cli-labs =2.2.0rc0, =2.2.0 Source cves: CVE-2026-86597 Source...

hera-ingestion (1.12.6.30), ingestr (>=0.14.142, <=0.14.155) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.18.0)

snowflake-connector-python PYPI version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - hera-ingestion 1.12.6.30 - ingestr =0.14.142, =0.4.36, =3.13.0, =3.13.0, =3.16.0 Source cves: CVE-2026-8659...

db-schemachange (>=0.0.1, <=0.0.7), fdc-shared-kernel (>=0.0.151, <=0.0.206) +4 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.16.0)

snowflake-connector-python PYPI version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - db-schemachange =0.0.1, =0.0.151, =3.0.4, =0.1.0, =0.2.4 Source cves: CVE-2026-86597 Source advisory:...

snowflake-cli (3.11.0), snowflake-cli-labs (3.11.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.17.2)

snowflake-connector-python PYPI version 3.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-cli 3.11.0 - snowflake-cli-labs 3.11.0 Source cves: CVE-2026-86597 Source advisory:...

aladdinsdk (>=2.0.0a3, <=2.0.0b10), snowflake-cli (3.12.0) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.17.3)

snowflake-connector-python PYPI version 3.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - aladdinsdk =2.0.0a3, =2.0.0b10 - snowflake-cli 3.12.0 - snowflake-cli-labs 3.12.0 Source cves: CVE-2026-865...

nova-prompt-optimizer (>=1.0.48, <=1.1.0), pkg-15903 (>=0.1.20, <=0.1.55) +9 more potentially affected by CVE-2026-102937 via virtualenv (20.31.2)

virtualenv PYPI version 20.31.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - nova-prompt-optimizer =1.0.48, =0.1.20, =0.1.1, =0.1.0, =1.0.0, =0.4.9, =0.5.3 Source cves: CVE-2026-102937 Source advisory:...

nova-prompt-optimizer (>=1.0.48, <=1.1.0), pkg-15903 (>=0.1.20, <=0.1.55) +9 more potentially affected by CVE-2026-102930 via virtualenv (20.31.2)

virtualenv PYPI version 20.31.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - nova-prompt-optimizer =1.0.48, =0.1.20, =0.1.1, =0.1.0, =1.0.0, =0.4.9, =0.5.3 Source cves: CVE-2026-102930 Source advisory:...

b1ddi (0.0.2), delete-branches (>=1.0.0, <=1.1.3) +15 more potentially affected by CVE-2026-102925 via virtualenv (20.34.0)

virtualenv PYPI version 20.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - b1ddi 0.0.2 - delete-branches =1.0.0, =1.1.14, =1.0.0, =1.1.0, =1.17.0, =1.25.0 and more Source cves: CVE-2026-102925 Source advisory:...

nova-prompt-optimizer (>=1.0.48, <=1.1.0), pkg-15903 (>=0.1.20, <=0.1.55) +9 more potentially affected by CVE-2026-102938 via virtualenv (20.31.2)

virtualenv PYPI version 20.31.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - nova-prompt-optimizer =1.0.48, =0.1.20, =0.1.1, =0.1.0, =1.0.0, =0.4.9, =0.5.3 Source cves: CVE-2026-102938 Source advisory:...

snowflake-cli-labs (>=3.0.1, <=3.26.0), vdsnow (0.1.0) potentially affected by CVE-2026-92903 via snowflake-cli (>=3.0.1, <=3.26.0)

snowflake-cli PYPI version =3.0.1, =3.0.1, =3.26.0 - vdsnow 0.1.0 Source cves: CVE-2026-92903 Source advisory: SNYK:PYTHON-SNOWFLAKECLI-21692670...

SQL Injection

Overview snowflake-cli is a Snowflake CLI Affected versions of this package are vulnerable to SQL Injection via the process that interpolates user-controlled values into SQL strings. An attacker can execute arbitrary SQL statements in the context of the victim's session and active role by providi...

CVE-2026-92903

Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious project configuration file or craft command-line input can...

snowflake-cli-labs (>=3.0.1, <=3.26.0), vdsnow (0.1.0) potentially affected by CVE-2026-92903 via snowflake-cli (>=3.0.1, <=3.26.0)

snowflake-cli PYPI version =3.0.1, =3.0.1, =3.26.0 - vdsnow 0.1.0 Source cves: CVE-2026-92903 Source advisory: MEND:CVE-2026-92903...

CVE-2026-92903

Improper input validation in Snowflake CLI versions prior to 3.27.0 allows unsanitized, user-controlled values to be interpolated into SQL strings executed as multi-statement queries. An attacker with write or pull-request access to a project repository whose CI/CD pipeline runs Snowflake CLI und...

EUVD-2026-81428

Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious project configuration file or craft command-line input can...

CVE-2026-92903

Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious project configuration file or craft command-line input can...

CVE-2026-92903 Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings

Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious project configuration file or craft command-line input can...

CVE-2026-92903 Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings

Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious project configuration file or craft command-line input can...