pipelinewise-target-snowflake (>=1.2.0, <=1.8.0), schemaql (>=0.0.2, <=0.0.4) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.0.3)

snowflake-connector-python PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake =1.2.0, =0.0.2, =0.0.4 Source cves: CVE-2026-15925 Source advisory:...

ewah (>=0.1.25, <=0.2.5), fivetran-autogen (>=0.0.1rc8, <=0.0.1rc9) +6 more potentially affected by CVE-2026-15925 via snowflake-connector-python (2.0.2)

snowflake-connector-python PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - ewah =0.1.25, =0.0.1rc8, =0.0.2, =2.2.0, =0.14.1, =0.110.1, =2.0.0, =2.1.0 - spswarehouse-airflow 0.6.3 Sour...

target-snowflake (0.0.0) potentially affected by CVE-2026-15925 via snowflake-connector-python (1.8.7)

snowflake-connector-python PYPI version 1.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - target-snowflake 0.0.0 Source cves: CVE-2026-15925 Source advisory: OSV:GHSA-5CC2-282F-JJQ2...

dbt-gen (>=0.1.1, <=0.1.4) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.7.4)

snowflake-connector-python PYPI version 2.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt-gen =0.1.1, =0.1.4 Source cves: CVE-2026-15925 Source advisory: OSV:GHSA-5CC2-282F-JJQ2...

database-factory (>=1.0.5, <=1.0.6), rcd-dev-kit (>=1.4.0, <=2.0.4) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.7.9)

snowflake-connector-python PYPI version 2.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - database-factory =1.0.5, =1.4.0, =2.0.4 Source cves: CVE-2026-15925 Source advisory: OSV:GHSA-5CC2-282F-JJQ2...

Improper Validation of Certificate with Host Mismatch

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch in the TLS certificate verification process. An attacker can intercept sensitive data, tamper with queries, or execute...

aigc-evals (>=0.0.2, <=0.0.3), analytics-agent-connector-snowflake (>=0.1.0, <=0.4.0) +37 more potentially affected by CVE-2026-15925 via snowflake-connector-python (>=4.0.0, <=4.7.0)

snowflake-connector-python PYPI version =4.0.0, =0.0.2, =0.1.0, =2020.5.20rc1, =1.0.0b2, =0.185.0, =1.0.3, =1.0.0, =0.0.1a66, =0.1.0, =0.42.1, =1.10.7, =2.79.1a0, =2.0.0, =2.0.0.post1 and more Source cves: CVE-2026-15925 Source advisory: SNYK:PYTHON-SNOWFLAKECONNECTORPYTHON-18017913...

aigc-evals (>=0.0.2, <=0.0.3), analytics-agent-connector-snowflake (>=0.1.0, <=0.4.0) +37 more potentially affected by CVE-2026-15925 via snowflake-connector-python (>=4.0.0, <=4.7.0)

snowflake-connector-python PYPI version =4.0.0, =0.0.2, =0.1.0, =2020.5.20rc1, =1.0.0b2, =0.185.0, =1.0.3, =1.0.0, =0.0.1a66, =0.1.0, =0.42.1, =1.10.7, =2.79.1a0, =2.0.0, =2.0.0.post1 and more Source cves: CVE-2026-15925 Source advisory: MEND:CVE-2026-15925...

acedeploy (>=2.4.15, <=2.4.366.dev1), acepolicies (>=0.1.17, <=0.1.23) +183 more potentially affected by CVE-2026-15925 via snowflake-connector-python (>=1.7.11, <=3.18.0)

snowflake-connector-python PYPI version =1.7.11, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =1.0.6, =2.4.0rc1, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =1.13.29 and more Source cves: CVE-2026-15925 Source advisory: MEND:CVE-2026-15925...

PT-2026-60425

Name of the Vulnerable Software and Affected Versions Snowflake Connector for Python versions prior to 4.7.1 Snowflake Connector for Python versions prior to 3.18.1 Description Improper TLS hostname verification allows a network-positioned attacker to bypass certificate hostname validation on HTT...

atlassian-jwt-auth (3.1.0), igitt (>=0.4.1.dev20171005105713, <=0.4.1.dev20171202111001) +4 more potentially affected by CVE-2024-0727 via cryptography (2.0.3)

cryptography PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - atlassian-jwt-auth 3.1.0 - igitt =0.4.1.dev20171005105713, =0.3.2, =0.1.4, =1.4.5, =1.4.9 Source cves: CVE-2024-0727 Source advisory:...

Incorrect Permission Assignment for Critical Resource

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the ConfigManager.readconfig path in configmanager.py. An attacker can modify sensitive settings stored in the...

EUVD-2025-0179

Malicious code in bioql PyPI...

CVE-2022-42965

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

Credential Caching

snowflakeconnectorpython is vulnerable to Credential Caching. The vulnerability is due to improper handling of temporary credential caching on Linux systems, When caching is enabled, the credentials are stored in a file that is readable by all users, allowing unauthorized access...

CVE-2025-24793

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. A function from the...

acedeploy (>=2.4.15, <=2.4.115), acepolicies (>=0.1.17, <=0.1.23) +104 more potentially affected by CVE-2025-24794 via snowflake-connector-python (>=2.7.12, <=3.13.0)

snowflake-connector-python PYPI version =2.7.12, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =20241210.4.0, =20230717.1.0, =20240129.2.0 - clope 0.1.2 and more Source cves: CVE-2025-24794 Source advisory: OSV:PYSEC-2025-27...

acedeploy (>=2.4.15, <=2.4.115), acepolicies (>=0.1.17, <=0.1.23) +136 more potentially affected by CVE-2025-24793 via snowflake-connector-python (>=2.2.5, <=3.13.0)

snowflake-connector-python PYPI version =2.2.5, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =2.4.0rc1, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =20241210.4.0, =20250324.2.0 and more Source cves: CVE-2025-24793 Source advisory: GHSA-2VPQ-FH52-J3WV...

acedeploy (>=2.4.15, <=2.4.115), acepolicies (>=0.1.17, <=0.1.23) +136 more potentially affected by CVE-2025-24793 via snowflake-connector-python (>=2.2.5, <=3.13.0)

snowflake-connector-python PYPI version =2.2.5, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =2.4.0rc1, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =20241210.4.0, =20250324.2.0 and more Source cves: CVE-2025-24793 Source advisory: SNYK:PYTHON-SNOWFLAKECONNECTORPYTHON-8674928...

Deserialization of Untrusted Data

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the insecure handling of serialization exceptions which is not supported for all exceptions. This is because The OCSP response cache...