expert-intelligence-toolbox (>=0.0.12, <=1.0.20), landingai (>=0.0.14, <=0.2.10) +7 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.0.4)

snowflake-connector-python PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - expert-intelligence-toolbox =0.0.12, =0.0.14, =3.11.1, =0.1.0, =0.0.1, =0.0.2 Source cves: CVE-2026-86597...

snowbim (>=1.0.7, <=1.0.10) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.4.3)

snowflake-connector-python PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowbim =1.0.7, =1.0.10 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

omnata-cli (>=0.1.4, <=0.1.7), omnata-snowcli-fork (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.0.3)

snowflake-connector-python PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - omnata-cli =0.1.4, =0.3.0, =0.2.0, =0.0.1, =0.0.11 Source cves: CVE-2026-86597 Source advisory:...

pipelinewise-tap-snowflake (2.0.3), pipelinewise-target-snowflake (1.10.1) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.3.7)

snowflake-connector-python PYPI version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake 2.0.3 - pipelinewise-target-snowflake 1.10.1 - snowmobile =0.2.0b16, =0.2.0b25...

sd-python-wrapper (>=0.1.2, <=0.1.26) potentially affected by CVE-2026-88029 via pymongo (3.2.0)

pymongo PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - sd-python-wrapper =0.1.2, =0.1.26 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

dbt (>=0.16.0b2, <=0.18.0b2), dbt-schema-builder (>=0.1.0, <=0.2.2) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.1)

snowflake-connector-python PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt =0.16.0b2, =0.1.0, =0.16.0b2, =0.2.0, =0.2.5 - snowshu 0.0.1b3 Source cves: CVE-2026-86597 Source...

pipelinewise-tap-snowflake (>=1.1.1, <=2.0.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.2)

snowflake-connector-python PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake =1.1.1, =2.0.0 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

PYSEC-2026-4236 Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description

Summary: A critical Authenticated Remote Code Execution RCE vulnerability exists in the validatecode function of Langflow. The /api/v1/validate/code endpoint, meant to validate user-supplied code, leverages Python's exec function. While it attempts to restrict execution to function definitions, i...

hera-ingestion (1.12.6.30), ingestr (>=0.14.142, <=0.14.155) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.18.0)

snowflake-connector-python PYPI version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - hera-ingestion 1.12.6.30 - ingestr =0.14.142, =0.4.36, =3.13.0, =3.13.0, =3.16.0 Source cves: CVE-2026-8659...

arreyy (0.0.1), dbt-schema-builder (>=0.4.5, <=0.4.13) +6 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.12)

snowflake-connector-python PYPI version 2.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - arreyy 0.0.1 - dbt-schema-builder =0.4.5, =1.1.0b1, =0.0.1, =0.0.1, =1.15.0, =2.2.0 - pyexql 0.0.1 Source...

acepolicies (>=0.1.17, <=0.1.23), cloe-extensions-snowflake-policies (>=20241210.4.0, <=20250324.2.0) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.1.0)

snowflake-connector-python PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - acepolicies =0.1.17, =20241210.4.0, =20250324.2.0 - snowflake-cli-labs 1.1.0 Source cves: CVE-2026-86597...

dbnd-snowflake (>=0.48.0, <=1.0.4.22), dbt (>=0.21.0b1, <=0.21.1) +7 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.5.1)

snowflake-connector-python PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbnd-snowflake =0.48.0, =0.21.0b1, =0.21.0a17, =0.4.1, =0.21.0b1, =0.1.0, =0.1.1, =0.0.1, =0.3.0, =0.4.0...

snowchange (>=0.0.1, <=0.0.4.post1) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.6)

snowflake-connector-python PYPI version 2.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowchange =0.0.1, =0.0.4.post1 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

dbcat (0.3.1), pipelinewise-target-snowflake (1.11.0) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.3.10)

snowflake-connector-python PYPI version 2.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbcat 0.3.1 - pipelinewise-target-snowflake 1.11.0 - pydbconnector-jinghan-ma =0.0.4, =0.0.5 Source cves:...

dbt-schema-builder (>=0.4.3, <=0.4.4), dbt-snowflake (>=1.0.0rc1, <=1.0.1) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.10)

snowflake-connector-python PYPI version 2.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt-schema-builder =0.4.3, =1.0.0rc1, =0.1.1, =0.2.7 - elementary-lineage 0.1.0 Source cves: CVE-2026-86597...

meltanolabs-tap-snowflake (>=0.2.0, <=0.3.0), snowflake-data-exchange-agent (>=0.0.21, <=1.0.1) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.17.4)

snowflake-connector-python PYPI version 3.17.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - meltanolabs-tap-snowflake =0.2.0, =0.0.21, =1.0.1 Source cves: CVE-2026-86597 Source advisory:...

monosi (>=0.0.1.post1, <=0.0.2.post5), monosi-server (0.0.1) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.2)

snowflake-connector-python PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - monosi =0.0.1.post1, =0.0.2.post5 - monosi-server 0.0.1 - snowshu 0.0.4a1 Source cves: CVE-2026-86597 Source...

cloeextensions (>=20230717.1.0, <=20231120.1.0), dbt-snowflake (>=1.4.0rc1, <=1.5.0b2) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.8.1)

snowflake-connector-python PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - cloeextensions =20230717.1.0, =1.4.0rc1, =1.5.0b2 - odd-dbt 0.1.7 Source cves: CVE-2026-86597 Source advisor...

inthub-cli (>=0.1.4, <=0.1.26), omnata-plugin-devkit (>=0.5.3, <=0.11.0) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.0)

snowflake-connector-python PYPI version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - inthub-cli =0.1.4, =0.5.3, =0.5.0a112, =0.11.9 - snowflake-cli-labs 3.0.0rc0 Source cves: CVE-2026-86597...

habu-snowflake-cli (>=4.5.0, <=5.1.0), klondike (>=0.2.0, <=0.2.3) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.10.1)

snowflake-connector-python PYPI version 3.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - habu-snowflake-cli =4.5.0, =0.2.0, =2.5.0rc0, =2.5.0 Source cves: CVE-2026-86597 Source advisory:...