org.liquibase:liquibase-cdi (>=4.13.0, <=4.14.0), org.liquibase:liquibase-maven-plugin (4.13.0) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.20)

net.snowflake:snowflake-jdbc MAVEN version 3.13.20 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.liquibase:liquibase-cdi =4.13.0, =4.14.0 - org.liquibase:liquibase-maven-plugin 4.13.0 Source cve...

io.kestra.plugin:plugin-jdbc-snowflake (>=0.4.1, <=0.4.2) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.16)

net.snowflake:snowflake-jdbc MAVEN version 3.13.16 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.kestra.plugin:plugin-jdbc-snowflake =0.4.1, =0.4.2 Source cves: CVE-2026-86597 Source advisory:...

acedeploy (>=2.4.15, <=2.4.115), covalent-blueprints-ai (>=0.4.0, <=0.5.0rc1) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.2)

snowflake-connector-python PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - acedeploy =2.4.15, =0.4.0, =3.0.1, =3.0.0rc3, =3.1.0 - tulona 0.12.0 Source cves: CVE-2026-86597 Source...

com.codbex.atlas:codbex-atlas-application (>=2.80.0, <=2.83.1), com.codbex.hades:codbex-hades-application (>=2.65.0, <=2.67.0) +9 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.27.0)

net.snowflake:snowflake-jdbc MAVEN version 3.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =2.80.0, =2.65.0, =12.32.0, =12.32.0, =12.32.0, =12.32.0,...

kpc-nifi-utils (0.2.3) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.0.0)

snowflake-connector-python PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - kpc-nifi-utils 0.2.3 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

pipelinewise-target-snowflake (>=1.2.0, <=1.8.0), schemaql (>=0.0.2, <=0.0.4) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.0.3)

snowflake-connector-python PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake =1.2.0, =0.0.2, =0.0.4 Source cves: CVE-2026-86597 Source advisory:...

com.codbex.atlas:codbex-atlas-application (>=2.97.0, <=14.49.0), com.codbex.gaia:codbex-gaia-application (>=2.73.0, <=14.49.0) +50 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (>=4.0.0, <=4.3.3)

net.snowflake:snowflake-jdbc MAVEN version =4.0.0, =2.97.0, =2.73.0, =2.72.0, =2.72.0, =2.65.0, =2.68.0, =3.27.0, =2.64.0, =0.10.0, =0.10.0, =0.10.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.3 and more Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

org.finos.legend-community:legend-delta (>=0.1.3, <=0.1.10), org.finos.legend.engine.ide.lsp:legend-engine-ide-lsp-default-extensions (>=0.6.0, <=0.34.0) +62 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.5)

net.snowflake:snowflake-jdbc MAVEN version 3.13.5 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.finos.legend-community:legend-delta =0.1.3, =0.6.0, =0.1.1, =4.29.1, =2.50.0, =2.36.0, =2.36.0,...

net.snowflake:spark-snowflake_2.11 (>=2.7.1-spark_2.2, <=2.7.1-spark_2.4), net.snowflake:spark-snowflake_2.12 (2.7.1-spark_2.4) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.12.5)

net.snowflake:snowflake-jdbc MAVEN version 3.12.5 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.11 =2.7.1-spark2.2, =2.7.1-spark2.4 - net.snowflake:spark-snowflake2.12...

dv-pyclient (>=0.5.1, <=0.6.0), snowctl (>=1.0.6, <=1.0.9) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.4)

snowflake-connector-python PYPI version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dv-pyclient =0.5.1, =1.0.6, =1.0.9 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

airbyte (>=0.11.0, <=0.27.0), airbyte-destination-pgvector (>=0.1.0, <=0.1.4) +117 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.18.1)

snowflake-connector-python PYPI version 3.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - airbyte =0.11.0, =0.1.0, =0.0.1, =0.1.5, =0.1.1, =0.4.6, =0.0.25, =0.1.9, =1.0.5, =1.0.1, =2.0.2, =2.1.0 an...

io.apiman:apiman-manager-api-jpa (>=3.0.0.rc6, <=3.1.3.final), io.apiman:apiman-manager-api-micro (>=3.0.0.rc6, <=3.1.3.final) +8 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.21)

net.snowflake:snowflake-jdbc MAVEN version 3.13.21 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.apiman:apiman-manager-api-jpa =3.0.0.rc6, =3.0.0.rc6, =3.0.0.rc6, =3.0.0.rc6, =4.15.0, =16.17.1,...

ae-mcp (0.2.0), analytics-agent-connector-snowflake (>=0.1.0, <=0.4.0) +30 more potentially affected by CVE-2026-86597 via snowflake-connector-python (>=4.0.0, <=4.7.2)

snowflake-connector-python PYPI version =4.0.0, =0.1.0, =2020.5.20rc1, =1.0.0b2, =0.185.0, =1.0.3, =1.0.0, =0.1.0, =1.10.7, =2.79.1a0, =3.0.0, =3.0.1.post1 - klondike 0.3.0 - lib2dlp 0.0.10 and more Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

@1stg/app-config (>=10.0.0, <=15.0.0), @1stg/common-config (>=10.0.0, <=15.0.0) +479 more potentially affected by CVE-2026-104844 via postcss-selector-parser (>=7.0.0, <=7.1.5)

postcss-selector-parser NPM version =7.0.0, =10.0.0, =10.0.0, =8.1.0, =13.0.0, =0.1.0-dev25004766367, =0.7.0-rohit-magnitude-valuetext.1, =1.0.3, =1.11.1, =1.11.1, =1.11.1, =1.12.0, =1.11.1, =1.11.1, =1.11.1, =1.11.1, =1.55.8 and more Source cves: CVE-2026-104844 Source advisory:...

@cotecna/stencil-components (>=3.3.1, <=4.0.0), @happyknuckles/angular-standalone-clean-code (0.0.2) +2 more potentially affected by CVE-2026-103922 via @capacitor/ios (>=7.0.1, <=7.4.4)

@capacitor/ios NPM version =7.0.1, =3.3.1, =0.0.24, =1.0.1, =1.8.0 Source cves: CVE-2026-103922 Source advisory: OSV:GHSA-RVM3-566M-V7FV...

@cotecna/stencil-components (>=3.3.1, <=4.0.0), @happyknuckles/angular-standalone-clean-code (0.0.2) +3 more potentially affected by CVE-2026-103922 via @capacitor/android (>=7.0.1, <=7.4.4)

@capacitor/android NPM version =7.0.1, =3.3.1, =0.0.24, =1.0.1, =0.0.1, =0.0.2 Source cves: CVE-2026-103922 Source advisory: GHSA-RVM3-566M-V7FV...

@cotecna/stencil-components (>=3.3.1, <=4.0.0), @happyknuckles/angular-standalone-clean-code (0.0.2) +2 more potentially affected by CVE-2026-103922 via @capacitor/ios (>=7.0.1, <=7.4.4)

@capacitor/ios NPM version =7.0.1, =3.3.1, =0.0.24, =1.0.1, =1.8.0 Source cves: CVE-2026-103922 Source advisory: GHSA-RVM3-566M-V7FV...

@vnejs/bundles.canvas.react (>=0.1.1, <=0.2.0), @vnejs/bundles.checkers (>=0.2.1, <=0.2.3) +7 more potentially affected by CVE-2026-103922 via @capacitor/android (8.0.2)

@capacitor/android NPM version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @capacitor/android and may be impacted: - @vnejs/bundles.canvas.react =0.1.1, =0.2.1, =0.1.0, =0.1.36, =0.1.2, =0.1.1, =0.1.1, =0.1.1, =0.2.20, =0.2.31 Source cves:...

authowl (>=0.3.0, <=0.3.12), quicktype (>=26.0.0-pre1, <=26.0.0) +1 more potentially affected by CVE-2026-104182 via stream-json (3.5.0)

stream-json NPM version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on stream-json and may be impacted: - authowl =0.3.0, =26.0.0-pre1, =0.1.0, =0.1.1 Source cves: CVE-2026-104182 Source advisory: GHSA-HQR4-QQ8F-HG3X...

@dataform/cli (>=3.0.57, <=3.0.71), @n8n-plus/n8n-plus (>=2.32.7, <=2.37.9) +18 more potentially affected by CVE-2026-92953 via vm2 (>=3.11.1, <=3.11.6)

vm2 NPM version =3.11.1, =3.0.57, =2.32.7, =2.32.0, =1.0.0, =1.1.15, =1.27.8, =2.32.0, =2.32.0, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.72.3, =1.74.12 and more Source cves: CVE-2026-92953 Source advisory: GHSA-3VGF-8M4Q-Q4QR...