dv-pyclient (>=0.5.1, <=0.6.0), snowctl (>=1.0.6, <=1.0.9) potentially affected by CVE-2023-34233 via snowflake-connector-python (2.2.4)

snowflake-connector-python PYPI version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dv-pyclient =0.5.1, =1.0.6, =1.0.9 Source cves: CVE-2023-34233 Source advisory: OSV:PYSEC-2023-88...

dbt (>=0.16.0b2, <=0.18.0b2), dbt-schema-builder (>=0.1.0, <=0.2.2) +3 more potentially affected by CVE-2023-34233 via snowflake-connector-python (2.2.1)

snowflake-connector-python PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt =0.16.0b2, =0.1.0, =0.16.0b2, =0.2.0, =0.2.5 - snowshu 0.0.1b3 Source cves: CVE-2023-34233 Source...

target-snowflake (0.2.4) potentially affected by CVE-2023-34233 via snowflake-connector-python (2.2.5)

snowflake-connector-python PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - target-snowflake 0.2.4 Source cves: CVE-2023-34233 Source advisory: OSV:PYSEC-2023-88...

snowflake-sqlalchemy (>=1.0.9, <=1.1.14), target-snowflake (0.0.2) potentially affected by CVE-2023-34233 via snowflake-connector-python (1.9.1)

snowflake-connector-python PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-sqlalchemy =1.0.9, =1.1.14 - target-snowflake 0.0.2 Source cves: CVE-2023-34233 Source advisory:...

pipelinewise-target-snowflake (>=1.2.0, <=1.8.0), schemaql (>=0.0.2, <=0.0.4) potentially affected by CVE-2023-34233 via snowflake-connector-python (2.0.3)

snowflake-connector-python PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake =1.2.0, =0.0.2, =0.0.4 Source cves: CVE-2023-34233 Source advisory:...

piicatcher (>=0.10.1, <=0.12.1) potentially affected by CVE-2023-34233 via snowflake-connector-python (2.2.7)

snowflake-connector-python PYPI version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - piicatcher =0.10.1, =0.12.1 Source cves: CVE-2023-34233 Source advisory: OSV:PYSEC-2023-88...

target-snowflake (0.0.0) potentially affected by CVE-2023-34233 via snowflake-connector-python (1.8.7)

snowflake-connector-python PYPI version 1.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - target-snowflake 0.0.0 Source cves: CVE-2023-34233 Source advisory: OSV:PYSEC-2023-88...

dagster-snowflake (>=0.6.4rc0, <=0.6.5), data-lineage (>=0.5.1, <=0.9.0) +5 more potentially affected by CVE-2023-34233 via snowflake-connector-python (2.0.1)

snowflake-connector-python PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dagster-snowflake =0.6.4rc0, =0.5.1, =0.8.3, =1.0.7, =2.43.2, =0.16.0, =0.1.0.dev3, =0.1.2 Source cves:...

snowchange (>=0.0.1, <=0.0.4.post1) potentially affected by CVE-2023-34233 via snowflake-connector-python (2.2.6)

snowflake-connector-python PYPI version 2.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowchange =0.0.1, =0.0.4.post1 Source cves: CVE-2023-34233 Source advisory: OSV:PYSEC-2023-88...

ewah (>=0.1.25, <=0.2.5), fivetran-autogen (>=0.0.1rc8, <=0.0.1rc9) +8 more potentially affected by CVE-2023-34233 via snowflake-connector-python (2.0.2)

snowflake-connector-python PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - ewah =0.1.25, =0.0.1rc8, =0.0.2, =2.2.0, =0.14.1, =0.110.1, =2.0.0, =0.1.0, =0.4.11 - ploosh-core 0.1.7.1 -...

kpc-nifi-utils (0.2.3) potentially affected by CVE-2023-34233 via snowflake-connector-python (2.0.0)

snowflake-connector-python PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - kpc-nifi-utils 0.2.3 Source cves: CVE-2023-34233 Source advisory: OSV:PYSEC-2023-88...

dbt (>=0.15.3rc1, <=0.16.0b1), dbt-snowflake (>=0.15.3rc1, <=0.16.0b1) +1 more potentially affected by CVE-2023-34233 via snowflake-connector-python (2.0.4)

snowflake-connector-python PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt =0.15.3rc1, =0.15.3rc1, =1.0.5, =1.1.0 Source cves: CVE-2023-34233 Source advisory: OSV:PYSEC-2023-88...

apache-airflow-providers-snowflake (>=2.4.0rc1, <=2.5.1), arreyy (0.0.1) +95 more potentially affected by CVE-2023-34233 via snowflake-connector-python (>=1.7.11, <=3.0.0)

snowflake-connector-python PYPI version =1.7.11, =2.4.0rc1, =0.1.0, =1.13.21, =20230717.1.0, =0.1.0, =0.4.0rc2, =0.5.1, =1.0.5, =0.5.19, =0.1.1, =0.6.8, =0.48.0, =0.15.3rc1, =0.21.1 and more Source cves: CVE-2023-34233 Source advisory: MEND:CVE-2023-34233...

Snowflake snowflake-connector-python command injection vulnerability

Snowflake snowflake-connector-python is Snowflake's Snowflake connector for Python, which conforms to the Python DB API 2.0 specification. A command injection vulnerability exists in Snowflake snowflake-connector-python versions prior to 3.0.2. An attacker could exploit this vulnerability to caus...

SUSE CVE-2016-5598

Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Connector/Python...

SUSE CVE-2019-2435

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Python. Supported versions that are affected are 8.0.13 and prior and 2.1.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Connector...

GHSA-4R6J-FWCX-94CF snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the getfiletransfertype method...

snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the getfiletransfertype method...

dagster-snowflake (>=0.4.0rc2, <=0.6.1) potentially affected by CVE-2022-42965 via snowflake-connector-python (1.7.11)

snowflake-connector-python PYPI version 1.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dagster-snowflake =0.4.0rc2, =0.6.1 Source cves: CVE-2022-42965 Source advisory: OSV:GHSA-4R6J-FWCX-94CF...

target-snowflake (0.0.0) potentially affected by CVE-2022-42965 via snowflake-connector-python (1.8.7)

snowflake-connector-python PYPI version 1.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - target-snowflake 0.0.0 Source cves: CVE-2022-42965 Source advisory: OSV:GHSA-4R6J-FWCX-94CF...