askbob (>=0.0.3, <=0.0.4), autoneuro-pypi (1.0.0) +45 more potentially affected by CVE-2026-96749 via pymongo (3.10.1)

pymongo PYPI version 3.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - askbob =0.0.3, =1.1.0, =1.1.0, =0.0.3, =1.3.7, =0.0.5, =0.0.2, =0.0.0, =0.0.13 - deeppavlov-agent 2.3.0a0 - discord-fate-bot 0.1.1 - dragg 0.0.0 ...

agave (>=0.0.1.dev0, <=0.2.3.dev0), agrothon (>=1.1.5, <=1.3.2) +348 more potentially affected by CVE-2026-96749 via pymongo (3.13.0)

pymongo PYPI version 3.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - agave =0.0.1.dev0, =1.1.5, =2022.9.19, =0.0.4, =0.0.1, =0.1.7, =0.2.0, =0.1.0, =0.7.1a0, =0.7.1a0, =0.7.1a0, =0.7.1a0, =0.7.1a3, =0.0.1, =2.2.0 a...

EUVD-2026-86348

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding...

EUVD-2026-86346

PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption...

sd-python-wrapper (>=0.1.2, <=0.1.26) potentially affected by CVE-2026-88029 via pymongo (3.2.0)

pymongo PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - sd-python-wrapper =0.1.2, =0.1.26 Source cves: CVE-2026-88029 Source advisory: OSV:GHSA-8FVV-FGR5-F8CH...

EUVD-2026-75665

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods...

CVE-2026-105782

Scrapy is a high-level web crawling and scraping framework for Python. From 1.4.0 until 2.14.2, RefererMiddleware in scrapy/spidermiddlewares/referer.py treated a Referrer-Policy response-header value that resembled a Python import path as a referrer policy class, imported the referenced object,...

dataops-testgen (>=3.7.1, <=4.1.3), keep-mirror (0.54.2) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.13.1)

snowflake-connector-python PYPI version 3.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dataops-testgen =3.7.1, =4.1.3 - keep-mirror 0.54.2 - rai-workflow-manager 0.0.52 Source cves: CVE-2026-865...

aladdinsdk (>=2.0.0b7, <=2.0.0b8), clearner (>=1.0.1, <=1.0.3) +12 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.15.0)

snowflake-connector-python PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - aladdinsdk =2.0.0b7, =1.0.1, =1.0.12, =2.1.5, =1.0.0, =0.0.2, =0.0.1, =3.7.2, =3.7.2, =0.9.1, =0.10.0 -...

omnata-cli (>=0.1.4, <=0.1.7), omnata-snowcli-fork (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.0.3)

snowflake-connector-python PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - omnata-cli =0.1.4, =0.3.0, =0.2.0, =0.0.1, =0.0.11 Source cves: CVE-2026-86597 Source advisory:...

GHSA-QQJ6-54Q6-CXV6 Snowflake drivers writes sensitive information to logs

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...

crumblpy (>=1.0.10, <=1.0.11), dataops-testgen (>=3.0.0, <=3.1.2) +6 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.3)

snowflake-connector-python PYPI version 3.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - crumblpy =1.0.10, =3.0.0, =2.1.0, =3.2.0, =3.2.0, =0.10.21, =0.11.1 Source cves: CVE-2026-86597 Source...

acedeploy (>=2.4.15, <=2.4.115), covalent-blueprints-ai (>=0.4.0, <=0.5.0rc1) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.2)

snowflake-connector-python PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - acedeploy =2.4.15, =0.4.0, =3.0.1, =3.0.0rc3, =3.1.0 - tulona 0.12.0 Source cves: CVE-2026-86597 Source...

dbt-snowflake (1.4.0b1) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.8.3)

snowflake-connector-python PYPI version 2.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt-snowflake 1.4.0b1 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

cloeextensions (>=20230717.1.0, <=20231120.1.0), dbt-snowflake (>=1.4.0rc1, <=1.5.0b2) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.8.1)

snowflake-connector-python PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - cloeextensions =20230717.1.0, =1.4.0rc1, =1.5.0b2 - odd-dbt 0.1.7 Source cves: CVE-2026-86597 Source advisor...

unskript-cloudnative-observability (>=0.1.4, <=1.0.1456) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.6)

snowflake-connector-python PYPI version 2.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - unskript-cloudnative-observability =0.1.4, =1.0.1456 Source cves: CVE-2026-86597 Source advisory:...

dbt-gen (>=0.1.1, <=0.1.4) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.4)

snowflake-connector-python PYPI version 2.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt-gen =0.1.1, =0.1.4 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

kzr-snowflake (>=0.0.4, <=0.0.9), snowypushy (>=0.2.0, <=0.4.3) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.6.2)

snowflake-connector-python PYPI version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - kzr-snowflake =0.0.4, =0.2.0, =0.4.3 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

datupapi (>=0.5.19, <=1.0.3) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.5.0)

snowflake-connector-python PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - datupapi =0.5.19, =1.0.3 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

snowbim (>=1.0.7, <=1.0.10) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.4.3)

snowflake-connector-python PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowbim =1.0.7, =1.0.10 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...