CVE-2023-34233_Proof_OF_Concept

Snowflake Connector CVE-2025-24793 PoC This repository contains Proof of Concept PoC code for testing CVE-2025-24793 vulnerability in Snowflake Connector for Python. The project includes both patched and unpatched versions to demonstrate the vulnerability and its fix. Prerequisites Docker install...

pipelinewise-tap-snowflake (2.0.1), snowday (>=0.1.3, <=0.1.5) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.9)

snowflake-connector-python PYPI version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake 2.0.1 - snowday =0.1.3, =0.1.5 Source cves: CVE-2026-86597 Source advisory:...

cafex (1.0.0), cafex-db (1.0.0) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.8.1)

snowflake-connector-python PYPI version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - cafex 1.0.0 - cafex-db 1.0.0 - snowflake-cli-labs =2.2.0rc0, =2.2.0 Source cves: CVE-2026-86597 Source...

omnata-cli (>=0.1.4, <=0.1.7), omnata-snowcli-fork (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.0.3)

snowflake-connector-python PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - omnata-cli =0.1.4, =0.3.0, =0.2.0, =0.0.1, =0.0.11 Source cves: CVE-2026-86597 Source advisory:...

pipelinewise-target-snowflake (>=1.2.0, <=1.8.0), schemaql (>=0.0.2, <=0.0.4) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.0.3)

snowflake-connector-python PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake =1.2.0, =0.0.2, =0.0.4 Source cves: CVE-2026-86597 Source advisory:...

airbyte (>=0.11.0, <=0.27.0), airbyte-destination-pgvector (>=0.1.0, <=0.1.4) +117 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.18.1)

snowflake-connector-python PYPI version 3.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - airbyte =0.11.0, =0.1.0, =0.0.1, =0.1.5, =0.1.1, =0.4.6, =0.0.25, =0.1.9, =1.0.5, =1.0.1, =2.0.2, =2.1.0 an...

dbt-schema-builder (>=0.4.3, <=0.4.4), dbt-snowflake (>=1.0.0rc1, <=1.0.1) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.10)

snowflake-connector-python PYPI version 2.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt-schema-builder =0.4.3, =1.0.0rc1, =0.1.1, =0.2.7 - elementary-lineage 0.1.0 Source cves: CVE-2026-86597...

target-snowflake (0.0.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (1.8.7)

snowflake-connector-python PYPI version 1.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - target-snowflake 0.0.0 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

db-schemachange (>=0.0.1, <=0.0.7), fdc-shared-kernel (>=0.0.151, <=0.0.206) +4 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.16.0)

snowflake-connector-python PYPI version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - db-schemachange =0.0.1, =0.0.151, =3.0.4, =0.1.0, =0.2.4 Source cves: CVE-2026-86597 Source advisory:...

csv-to-snowflake (>=0.1.0, <=0.2.1), dbt (>=0.18.0rc1, <=0.19.0b1) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.10)

snowflake-connector-python PYPI version 2.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - csv-to-snowflake =0.1.0, =0.18.0rc1, =0.2.3, =0.3.0 Source cves: CVE-2026-86597 Source advisory:...

dbnd-snowflake (>=0.48.0, <=1.0.4.22), dbt (>=0.21.0b1, <=0.21.1) +7 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.5.1)

snowflake-connector-python PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbnd-snowflake =0.48.0, =0.21.0b1, =0.21.0a17, =0.4.1, =0.21.0b1, =0.1.0, =0.1.1, =0.0.1, =0.3.0, =0.4.0...

dbt-snowflake (1.4.0b1) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.8.3)

snowflake-connector-python PYPI version 2.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt-snowflake 1.4.0b1 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

snowflake-cli-labs (>=3.0.0rc1, <=3.0.0rc2) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.1)

snowflake-connector-python PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-cli-labs =3.0.0rc1, =3.0.0rc2 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV...

acedeploy (>=2.4.15, <=2.4.115), covalent-blueprints-ai (>=0.4.0, <=0.5.0rc1) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.2)

snowflake-connector-python PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - acedeploy =2.4.15, =0.4.0, =3.0.1, =3.0.0rc3, =3.1.0 - tulona 0.12.0 Source cves: CVE-2026-86597 Source...

pipelinewise-tap-snowflake (2.0.3), pipelinewise-target-snowflake (1.10.1) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.3.7)

snowflake-connector-python PYPI version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake 2.0.3 - pipelinewise-target-snowflake 1.10.1 - snowmobile =0.2.0b16, =0.2.0b25...

cloeextensions (>=20231128.1.0, <=20240129.2.0), core-db (1.0.0) +5 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.5.0)

snowflake-connector-python PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - cloeextensions =20231128.1.0, =4.3.0, =0.5.1, =0.2.1, =0.1.0, =0.2.1 - snowflake-cli-labs 2.0.0a1 Source cve...

piicatcher (>=0.10.1, <=0.12.1) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.7)

snowflake-connector-python PYPI version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - piicatcher =0.10.1, =0.12.1 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

hera-ingestion (1.12.6.30), ingestr (>=0.14.142, <=0.14.155) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.18.0)

snowflake-connector-python PYPI version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - hera-ingestion 1.12.6.30 - ingestr =0.14.142, =0.4.36, =3.13.0, =3.13.0, =3.16.0 Source cves: CVE-2026-8659...

dagster-snowflake (>=0.21.8, <=0.22.3), dagster-snowflake-pandas (>=0.21.8, <=0.22.3) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.4.1)

snowflake-connector-python PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dagster-snowflake =0.21.8, =0.21.8, =0.21.8, =0.22.3 - quacker 0.6.2 Source cves: CVE-2026-86597 Source...

dbt (>=0.16.0b2, <=0.18.0b2), dbt-schema-builder (>=0.1.0, <=0.2.2) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.1)

snowflake-connector-python PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt =0.16.0b2, =0.1.0, =0.16.0b2, =0.2.0, =0.2.5 - snowshu 0.0.1b3 Source cves: CVE-2026-86597 Source...