apache-airflow-providers-snowflake (>=2.4.0rc1, <=2.5.1), arreyy (0.0.1) +66 more potentially affected by CVE-2022-42965 via snowflake-connector-python (>=2.0.0, <=2.8.1)

snowflake-connector-python PYPI version =2.0.0, =2.4.0rc1, =20230717.1.0, =0.1.0, =0.6.4rc0, =0.5.1, =1.0.5, =0.5.19, =0.1.1, =0.48.0, =0.15.3rc1, =0.19.1a7, =0.1.1, =0.1.4 - dbt-oracledb 0.1.0 and more Source cves: CVE-2022-42965 Source advisory: OSV:PYSEC-2026-922...

dagster-snowflake (>=0.4.0rc2, <=0.6.1) potentially affected by CVE-2022-42965 via snowflake-connector-python (1.7.11)

snowflake-connector-python PYPI version 1.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dagster-snowflake =0.4.0rc2, =0.6.1 Source cves: CVE-2022-42965 Source advisory: OSV:PYSEC-2026-922...

snowflake-sqlalchemy (>=1.0.9, <=1.1.14), target-snowflake (0.0.2) potentially affected by CVE-2022-42965 via snowflake-connector-python (1.9.1)

snowflake-connector-python PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-sqlalchemy =1.0.9, =1.1.14 - target-snowflake 0.0.2 Source cves: CVE-2022-42965 Source advisory:...

CVE-2022-42965

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

apache-airflow-providers-snowflake (>=2.4.0rc1, <=2.5.1), arreyy (0.0.1) +66 more potentially affected by CVE-2022-42965 via snowflake-connector-python (>=2.0.0, <=2.8.1)

snowflake-connector-python PYPI version =2.0.0, =2.4.0rc1, =20230717.1.0, =0.1.0, =0.6.4rc0, =0.5.1, =1.0.5, =0.5.19, =0.1.1, =0.48.0, =0.15.3rc1, =0.19.1a7, =0.1.1, =0.1.4 - dbt-oracledb 0.1.0 and more Source cves: CVE-2022-42965 Source advisory: OSV:GHSA-4R6J-FWCX-94CF...

apache-airflow-providers-snowflake (>=2.4.0rc1, <=2.5.1), arreyy (0.0.1) +66 more potentially affected by CVE-2022-42965 via snowflake-connector-python (>=2.0.0, <=2.8.1)

snowflake-connector-python PYPI version =2.0.0, =2.4.0rc1, =20230717.1.0, =0.1.0, =0.6.4rc0, =0.5.1, =1.0.5, =0.5.19, =0.1.1, =0.48.0, =0.15.3rc1, =0.19.1a7, =0.1.1, =0.1.4 - dbt-oracledb 0.1.0 and more Source cves: CVE-2022-42965 Source advisory: GHSA-4R6J-FWCX-94CF...

CVE-2022-42965

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

CVE-2022-42965

CVE-2022-42965 affects the Python Snowflake connector (snowflake-connector-python). The vulnerability is an exponential ReDoS in the undocumented get_file_transfer_type method, allowing a network attacker to trigger a denial of service by supplying crafted input. Underlying cause: a vulnerable re...

apache-airflow-providers-snowflake (>=2.4.0rc1, <=2.5.1), arreyy (0.0.1) +67 more potentially affected by CVE-2022-42965 via snowflake-connector-python (>=1.7.11, <=2.8.1)

snowflake-connector-python PYPI version =1.7.11, =2.4.0rc1, =20230717.1.0, =0.1.0, =0.4.0rc2, =0.5.1, =1.0.5, =0.5.19, =0.1.1, =0.48.0, =0.15.3rc1, =0.19.1a7, =0.1.1, =0.1.4 - dbt-oracledb 0.1.0 and more Source cves: CVE-2022-42965 Source advisory: MEND:CVE-2022-42965...

CVE-2022-42965 Exponential ReDoS in snowflake-connector-python leads to denial of service

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

CVE-2022-42965 Exponential ReDoS in snowflake-connector-python leads to denial of service

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...