CVE-2026-15925

Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. An attacker with on-path network access could exploit this b...

CVE-2026-15925 Improper TLS Hostname Verification in Snowflake Connector for Python

Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. An attacker with on-path network access could exploit this b...

EUVD-2026-44869

Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. An attacker with on-path network access could exploit this b...

CVE-2026-15925

Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. An attacker with on-path network access could exploit this b...

PT-2026-60425

Name of the Vulnerable Software and Affected Versions Snowflake Connector for Python versions prior to 4.7.1 Snowflake Connector for Python versions prior to 3.18.1 Description Improper TLS hostname verification allows a network-positioned attacker to bypass certificate hostname validation on HTT...

Incorrect Permission Assignment for Critical Resource

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the ConfigManager.readconfig path in configmanager.py. An attacker can modify sensitive settings stored in the...

EUVD-2025-0190

Malicious code in bioql PyPI...

EUVD-2025-0179

Malicious code in bioql PyPI...

EUVD-2025-12608

Malicious code in bioql PyPI...

EUVD-2025-12611

Malicious code in bioql PyPI...

EUVD-2024-0163

Malicious code in bioql PyPI...

EUVD-2023-1657

Malicious code in bioql PyPI...

EUVD-2025-0122

Malicious code in bioql PyPI...

EUVD-2023-0241

Malicious code in bioql PyPI...

EUVD-2022-7229

Malicious code in bioql PyPI...

EUVD-2025-12597

Malicious code in bioql PyPI...

EUVD-2025-12598

Malicious code in bioql PyPI...

EUVD-2025-0120

Malicious code in bioql PyPI...

EUVD-2023-1814

Malicious code in bioql PyPI...

Exploit for Command Injection in Snowflake Snowflake_Connector

Snowflake Connector CVE-2025-24793 PoC This repository contai...