pipelinewise-tap-snowflake (2.0.1), snowday (>=0.1.3, <=0.1.5) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.2.9)

snowflake-connector-python PYPI version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake 2.0.1 - snowday =0.1.3, =0.1.5 Source cves: CVE-2026-15925 Source advisory:...

csv-to-snowflake (>=0.1.0, <=0.2.1), dbt (>=0.18.0rc1, <=0.19.0b1) +1 more potentially affected by CVE-2026-15925 via snowflake-connector-python (2.2.10)

snowflake-connector-python PYPI version 2.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - csv-to-snowflake =0.1.0, =0.18.0rc1, =0.2.3, =0.3.0 Source cves: CVE-2026-15925 Source advisory:...

dbcat (0.3.1), pipelinewise-target-snowflake (1.11.0) +1 more potentially affected by CVE-2026-15925 via snowflake-connector-python (2.3.10)

snowflake-connector-python PYPI version 2.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbcat 0.3.1 - pipelinewise-target-snowflake 1.11.0 - pydbconnector-jinghan-ma =0.0.4, =0.0.5 Source cves:...

pipelinewise-target-snowflake (1.12.0) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.4.2)

snowflake-connector-python PYPI version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake 1.12.0 Source cves: CVE-2026-15925 Source advisory: OSV:PYSEC-2026-3920...

dbt (>=0.15.3rc1, <=0.16.0b1), dbt-snowflake (>=0.15.3rc1, <=0.16.0b1) +1 more potentially affected by CVE-2026-15925 via snowflake-connector-python (2.0.4)

snowflake-connector-python PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt =0.15.3rc1, =0.15.3rc1, =1.0.5, =1.1.0 Source cves: CVE-2026-15925 Source advisory: OSV:PYSEC-2026-3920...

sealights-python-agent (>=0.2.213, <=0.2.247) potentially affected by CVE-2026-67323 via gitpython (2.1.13)

gitpython PYPI version 2.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - sealights-python-agent =0.2.213, =0.2.247 Source cves: CVE-2026-67323 Source advisory: OSV:PYSEC-2026-3839...

Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability

Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Python bindings.This issue affects Apache Thrift: before 0.24.0.Users are recommended to upgrade to version 0.24.0, which fixes the issue...

dagster-snowflake (>=0.4.0rc2, <=0.6.1) potentially affected by CVE-2026-15925 via snowflake-connector-python (1.7.11)

snowflake-connector-python PYPI version 1.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dagster-snowflake =0.4.0rc2, =0.6.1 Source cves: CVE-2026-15925 Source advisory: OSV:PYSEC-2026-3920...

target-snowflake (0.0.0) potentially affected by CVE-2026-15925 via snowflake-connector-python (1.8.7)

snowflake-connector-python PYPI version 1.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - target-snowflake 0.0.0 Source cves: CVE-2026-15925 Source advisory: OSV:PYSEC-2026-3920...

pipelinewise-target-snowflake (>=1.2.0, <=1.8.0), schemaql (>=0.0.2, <=0.0.4) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.0.3)

snowflake-connector-python PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake =1.2.0, =0.0.2, =0.0.4 Source cves: CVE-2026-15925 Source advisory:...

dbt (>=0.16.0b2, <=0.18.0b2), dbt-schema-builder (>=0.1.0, <=0.2.2) +3 more potentially affected by CVE-2026-15925 via snowflake-connector-python (2.2.1)

snowflake-connector-python PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt =0.16.0b2, =0.1.0, =0.16.0b2, =0.2.0, =0.2.5 - snowshu 0.0.1b3 Source cves: CVE-2026-15925 Source...

dbt-snowflake (1.4.0b1) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.8.3)

snowflake-connector-python PYPI version 2.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt-snowflake 1.4.0b1 Source cves: CVE-2026-15925 Source advisory: OSV:PYSEC-2026-3920...

acedeploy (>=2.4.15, <=2.4.366.dev1), acepolicies (>=0.1.17, <=0.1.23) +99 more potentially affected by CVE-2026-15925 via snowflake-connector-python (>=3.0.0, <=3.18.0)

snowflake-connector-python PYPI version =3.0.0, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =1.0.6, =1.0.23, =0.1.3, =0.1.0, =1.0.1, =20241210.4.0, =20231128.1.0, =20240129.2.0 and more Source cves: CVE-2026-15925 Source advisory: OSV:PYSEC-2026-3920...

analytics-agent-connector-snowflake (>=0.1.0, <=0.4.0), apache-airflow-backport-providers-snowflake (>=2020.5.20rc1, <=2021.3.13) +29 more potentially affected by CVE-2026-15925 via snowflake-connector-python (>=4.0.0, <=4.7.0)

snowflake-connector-python PYPI version =4.0.0, =0.1.0, =2020.5.20rc1, =1.0.0b2, =0.185.0, =1.0.3, =1.0.0, =0.1.0, =1.10.7, =1.2.1, =2.79.1a0, =0.6.1, =0.14.0 and more Source cves: CVE-2026-15925 Source advisory: OSV:PYSEC-2026-3920...

pipelinewise-target-snowflake (1.11.1), rappiflow-dag-operators (>=0.2.6, <=0.3.1) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.4.1)

snowflake-connector-python PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake 1.11.1 - rappiflow-dag-operators =0.2.6, =0.3.1 Source cves: CVE-2026-15925...

datupapi (>=0.5.19, <=1.0.3) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.5.0)

snowflake-connector-python PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - datupapi =0.5.19, =1.0.3 Source cves: CVE-2026-15925 Source advisory: OSV:PYSEC-2026-3920...

kzr-snowflake (>=0.0.4, <=0.0.9), snowypushy (>=0.2.0, <=0.4.3) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.6.2)

snowflake-connector-python PYPI version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - kzr-snowflake =0.0.4, =0.2.0, =0.4.3 Source cves: CVE-2026-15925 Source advisory: OSV:PYSEC-2026-3920...

dbt-gen (>=0.1.1, <=0.1.4) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.7.4)

snowflake-connector-python PYPI version 2.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt-gen =0.1.1, =0.1.4 Source cves: CVE-2026-15925 Source advisory: OSV:PYSEC-2026-3920...

cdwutils (>=1.13.21, <=1.13.29), dbd (>=0.6.8, <=0.8.9) +30 more potentially affected by CVE-2026-15925 via snowflake-connector-python (2.9.0)

snowflake-connector-python PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - cdwutils =1.13.21, =0.6.8, =0.1.0, =0.5.0, =0.1.28, =2.1.0, =1.0.60b0, =0.0.1, =0.2.0, =0.1.0, =0.1.0, =1.0....

dbcat (>=0.1.1, <=0.3.0) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.3.8)

snowflake-connector-python PYPI version 2.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbcat =0.1.1, =0.3.0 Source cves: CVE-2026-15925 Source advisory: OSV:PYSEC-2026-3920...