com.snowflake:snowpark-fips (>=1.16.0, <=1.16.1), com.snowflake:snowpark-fips_2.12 (>=1.17.0, <=1.18.0) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-fips (3.24.2)

net.snowflake:snowflake-jdbc-fips MAVEN version 3.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc-fips and may be impacted: - com.snowflake:snowpark-fips =1.16.0, =1.17.0, =1.17.0, =1.18.0 Source cves: CVE-2026-86597...

GHSA-QQJ6-54Q6-CXV6 Snowflake drivers writes sensitive information to logs

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...

EUVD-2026-72672

Snowflake drivers writes sensitive information to logs...

NPM: Snowflake drivers writes sensitive information to logs

NPM: Snowflake drivers writes sensitive information to logs vulnerability discovered by ? in WordPress Npm snowflake-sdk versions 3.3.0...

com.snowflake:snowpark (1.9.0), io.github.stewartbryson.snowflake:io.github.stewartbryson.snowflake.gradle.plugin (>=2.1.5, <=2.1.11) +3 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.14.1)

net.snowflake:snowflake-jdbc MAVEN version 3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.snowflake:snowpark 1.9.0 -...

com.snowflake:snowpark-fips (1.9.0) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-fips (3.14.1)

net.snowflake:snowflake-jdbc-fips MAVEN version 3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc-fips and may be impacted: - com.snowflake:snowpark-fips 1.9.0 Source cves: CVE-2026-86597 Source advisory:...

com.codbex.atlas:codbex-atlas-application (>=2.48.0, <=2.53.0), com.codbex.gaia:codbex-gaia-application (>=2.55.0, <=2.57.0) +17 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.24.0)

net.snowflake:snowflake-jdbc MAVEN version 3.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =2.48.0, =2.55.0, =2.42.0, =2.42.0, =2.42.0, =2.42.0, =2.42....

io.trino:trino-iceberg (>=464, <=468), io.trino:trino-snowflake (>=464, <=468) +4 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.19.1)

net.snowflake:snowflake-jdbc MAVEN version 3.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.trino:trino-iceberg =464, =464, =1.7.0, =10.6.32, =10.6.32, =10.6.32, =10.6.34 Source cves:...

io.smartdatalake:sdl-snowflake_2.11 (>=1.2.4, <=1.3.2), io.smartdatalake:sdl-snowflake_2.12 (>=1.2.4, <=2.1.1) +4 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.12.17)

net.snowflake:snowflake-jdbc MAVEN version 3.12.17 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.smartdatalake:sdl-snowflake2.11 =1.2.4, =1.2.4, =2.8.4-spark2.3, =2.8.4-spark2.4, =7.5.4, =7.5.4,...

org.apache.nifi:nifi-snowflake-processors (>=2.10.0, <=2.11.0), org.apache.nifi:nifi-snowflake-processors-nar (>=2.10.0, <=2.11.0) +4 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-thin (>=4.3.0, <=4.3.2)

net.snowflake:snowflake-jdbc-thin MAVEN version =4.3.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.11.0 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

omnata-cli (>=0.1.4, <=0.1.7), omnata-snowcli-fork (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.0.3)

snowflake-connector-python PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - omnata-cli =0.1.4, =0.3.0, =0.2.0, =0.0.1, =0.0.11 Source cves: CVE-2026-86597 Source advisory:...

io.trino:trino-iceberg (>=454, <=456), io.trino:trino-snowflake (>=454, <=456) +7 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.18.0)

net.snowflake:snowflake-jdbc MAVEN version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.trino:trino-iceberg =454, =454, =2.2.1, =10.6.19, =0.1.0, =16.22.1, =16.22.1, =16.22.1, =16.22.1,...

com.codbex.atlas:codbex-atlas-application (>=2.71.0, <=2.75.0), com.codbex.gaia:codbex-gaia-application (>=2.65.0, <=2.67.0) +13 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.25.0)

net.snowflake:snowflake-jdbc MAVEN version 3.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =2.71.0, =2.65.0, =2.57.0, =2.62.0, =2.56.0, =2.58.0, =3.17....

pipelinewise-target-snowflake (>=1.2.0, <=1.8.0), schemaql (>=0.0.2, <=0.0.4) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.0.3)

snowflake-connector-python PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake =1.2.0, =0.0.2, =0.0.4 Source cves: CVE-2026-86597 Source advisory:...

dbt-schema-builder (>=0.4.3, <=0.4.4), dbt-snowflake (>=1.0.0rc1, <=1.0.1) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.10)

snowflake-connector-python PYPI version 2.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt-schema-builder =0.4.3, =1.0.0rc1, =0.1.1, =0.2.7 - elementary-lineage 0.1.0 Source cves: CVE-2026-86597...

io.apiman:apiman-manager-api-jpa (>=3.0.0.rc6, <=3.1.3.final), io.apiman:apiman-manager-api-micro (>=3.0.0.rc6, <=3.1.3.final) +8 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.21)

net.snowflake:snowflake-jdbc MAVEN version 3.13.21 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.apiman:apiman-manager-api-jpa =3.0.0.rc6, =3.0.0.rc6, =3.0.0.rc6, =3.0.0.rc6, =4.15.0, =16.17.1,...

com.codbex.atlas:codbex-atlas-application (>=2.97.0, <=14.49.0), com.codbex.gaia:codbex-gaia-application (>=2.73.0, <=14.49.0) +50 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (>=4.0.0, <=4.3.3)

net.snowflake:snowflake-jdbc MAVEN version =4.0.0, =2.97.0, =2.73.0, =2.72.0, =2.72.0, =2.65.0, =2.68.0, =3.27.0, =2.64.0, =0.10.0, =0.10.0, =0.10.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.3 and more Source cves: CVE-2026-86597 Source advisory: GHSA-QQJ6-54Q6-CXV6...

db-schemachange (>=0.0.1, <=0.0.7), fdc-shared-kernel (>=0.0.151, <=0.0.206) +4 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.16.0)

snowflake-connector-python PYPI version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - db-schemachange =0.0.1, =0.0.151, =3.0.4, =0.1.0, =0.2.4 Source cves: CVE-2026-86597 Source advisory:...

com.snowflake:snowpark-fips (>=1.2.0, <=1.7.2) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-fips (3.13.14)

net.snowflake:snowflake-jdbc-fips MAVEN version 3.13.14 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc-fips and may be impacted: - com.snowflake:snowpark-fips =1.2.0, =1.7.2 Source cves: CVE-2026-86597 Source advisory:...

com.codbex.atlas:codbex-atlas-application (>=2.97.0, <=14.49.0), com.codbex.gaia:codbex-gaia-application (>=2.73.0, <=14.49.0) +50 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (>=4.0.0, <=4.3.3)

net.snowflake:snowflake-jdbc MAVEN version =4.0.0, =2.97.0, =2.73.0, =2.72.0, =2.72.0, =2.65.0, =2.68.0, =3.27.0, =2.64.0, =0.10.0, =0.10.0, =0.10.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.3 and more Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...