dagster-snowflake (>=0.4.0rc2, <=0.6.1) potentially affected by CVE-2024-49750 via snowflake-connector-python (1.7.11)

snowflake-connector-python PYPI version 1.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dagster-snowflake =0.4.0rc2, =0.6.1 Source cves: CVE-2024-49750 Source advisory: OSV:GHSA-5VVG-PVHP-HV2M...

dbnd-snowflake (>=0.48.0, <=1.0.4.22), dbt (>=0.21.0b1, <=0.21.1) +7 more potentially affected by CVE-2024-49750 via snowflake-connector-python (2.5.1)

snowflake-connector-python PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbnd-snowflake =0.48.0, =0.21.0b1, =0.21.0a17, =0.4.1, =0.21.0b1, =0.1.0, =0.1.1, =0.0.1, =0.3.0, =0.4.0...

dbt (>=0.16.0b2, <=0.18.0b2), dbt-schema-builder (>=0.1.0, <=0.2.2) +3 more potentially affected by CVE-2024-49750 via snowflake-connector-python (2.2.1)

snowflake-connector-python PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt =0.16.0b2, =0.1.0, =0.16.0b2, =0.2.0, =0.2.5 - snowshu 0.0.1b3 Source cves: CVE-2024-49750 Source...

bizzflow-toolkit (2.3.0.dev3), dbt (>=0.19.0rc1, <=0.19.2) +11 more potentially affected by CVE-2024-49750 via snowflake-connector-python (2.3.6)

snowflake-connector-python PYPI version 2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - bizzflow-toolkit 2.3.0.dev3 - dbt =0.19.0rc1, =0.3.1, =1.9.1, =0.5.0, =0.1.0, =2.8.1, =1.0.11, =2.4.0,...

csv-to-snowflake (>=0.1.0, <=0.2.1), dbt (>=0.18.0rc1, <=0.19.0b1) +1 more potentially affected by CVE-2024-49750 via snowflake-connector-python (2.2.10)

snowflake-connector-python PYPI version 2.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - csv-to-snowflake =0.1.0, =0.18.0rc1, =0.2.3, =0.3.0 Source cves: CVE-2024-49750 Source advisory:...

acedeploy (>=2.4.15, <=2.4.115), acepolicies (>=0.1.17, <=0.1.23) +53 more potentially affected by CVE-2024-49750 via snowflake-connector-python (>=3.0.0, <=3.12.2)

snowflake-connector-python PYPI version =3.0.0, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =1.0.23, =0.1.0, =20241210.4.0, =20231128.1.0, =0.4.0, =0.21.8, =0.22.3 and more Source cves: CVE-2024-49750 Source advisory: SNYK:PYTHON-SNOWFLAKECONNECTORPYTHON-8303773...

Insertion of Sensitive Information into Log File

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File due to the logging of sensitive information when the logging level is set to DEBUG. An attacker can access sensitive data su...

dbt (>=0.20.0b1, <=0.20.2), dbt-osmosis (>=0.2.0, <=0.2.1) +5 more potentially affected by CVE-2024-49750 via snowflake-connector-python (2.4.6)

snowflake-connector-python PYPI version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt =0.20.0b1, =0.2.0, =0.20.0b1, =1.13.0, =0.2.0a0, =2.9.1, =0.0.2a1, =0.0.2rc4 Source cves: CVE-2024-49750...

datupapi (>=0.5.19, <=1.0.3) potentially affected by CVE-2024-49750 via snowflake-connector-python (2.5.0)

snowflake-connector-python PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - datupapi =0.5.19, =1.0.3 Source cves: CVE-2024-49750 Source advisory: OSV:PYSEC-2024-191...

dbnd-snowflake (>=0.48.0, <=1.0.4.22), dbt (>=0.21.0b1, <=0.21.1) +7 more potentially affected by CVE-2024-49750 via snowflake-connector-python (2.5.1)

snowflake-connector-python PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbnd-snowflake =0.48.0, =0.21.0b1, =0.21.0a17, =0.4.1, =0.21.0b1, =0.1.0, =0.1.1, =0.0.1, =0.3.0, =0.4.0...

dbt (>=0.15.3rc1, <=0.16.0b1), dbt-snowflake (>=0.15.3rc1, <=0.16.0b1) +1 more potentially affected by CVE-2024-49750 via snowflake-connector-python (2.0.4)

snowflake-connector-python PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt =0.15.3rc1, =0.15.3rc1, =1.0.5, =1.1.0 Source cves: CVE-2024-49750 Source advisory: OSV:PYSEC-2024-191...

dagster-snowflake (>=0.6.4rc0, <=0.6.5), data-lineage (>=0.5.1, <=0.9.0) +5 more potentially affected by CVE-2024-49750 via snowflake-connector-python (2.0.1)

snowflake-connector-python PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dagster-snowflake =0.6.4rc0, =0.5.1, =0.8.3, =1.0.7, =2.43.2, =0.16.0, =0.1.0.dev3, =0.1.2 Source cves:...

ewah (>=0.1.25, <=0.2.5), fivetran-autogen (>=0.0.1rc8, <=0.0.1rc9) +6 more potentially affected by CVE-2024-49750 via snowflake-connector-python (2.0.2)

snowflake-connector-python PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - ewah =0.1.25, =0.0.1rc8, =0.0.2, =2.2.0, =0.14.1, =0.110.1, =2.0.0, =2.1.0 - spswarehouse-airflow 0.6.3 Sour...

pipelinewise-target-snowflake (>=1.2.0, <=1.8.0), schemaql (>=0.0.2, <=0.0.4) potentially affected by CVE-2024-49750 via snowflake-connector-python (2.0.3)

snowflake-connector-python PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake =1.2.0, =0.0.2, =0.0.4 Source cves: CVE-2024-49750 Source advisory:...

pipelinewise-target-snowflake (1.12.0) potentially affected by CVE-2024-49750 via snowflake-connector-python (2.4.2)

snowflake-connector-python PYPI version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake 1.12.0 Source cves: CVE-2024-49750 Source advisory: OSV:PYSEC-2024-191...

snowbim (>=1.0.7, <=1.0.10) potentially affected by CVE-2024-49750 via snowflake-connector-python (2.4.3)

snowflake-connector-python PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowbim =1.0.7, =1.0.10 Source cves: CVE-2024-49750 Source advisory: OSV:PYSEC-2024-191...

kzr-snowflake (>=0.0.4, <=0.0.9), snowypushy (>=0.2.0, <=0.4.3) potentially affected by CVE-2024-49750 via snowflake-connector-python (2.6.2)

snowflake-connector-python PYPI version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - kzr-snowflake =0.0.4, =0.2.0, =0.4.3 Source cves: CVE-2024-49750 Source advisory: OSV:PYSEC-2024-191...

apache-airflow-providers-snowflake (>=2.4.0rc1, <=2.5.1), rcd-dev-kit (>=0.0.11, <=1.1.0) potentially affected by CVE-2024-49750 via snowflake-connector-python (2.7.1)

snowflake-connector-python PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - apache-airflow-providers-snowflake =2.4.0rc1, =0.0.11, =1.1.0 Source cves: CVE-2024-49750 Source advisory:...

reclist (0.2.0) potentially affected by CVE-2024-49750 via snowflake-connector-python (2.1.2)

snowflake-connector-python PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - reclist 0.2.0 Source cves: CVE-2024-49750 Source advisory: OSV:PYSEC-2024-191...

dbt (>=0.16.0b2, <=0.18.0b2), dbt-schema-builder (>=0.1.0, <=0.2.2) +3 more potentially affected by CVE-2024-49750 via snowflake-connector-python (2.2.1)

snowflake-connector-python PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt =0.16.0b2, =0.1.0, =0.16.0b2, =0.2.0, =0.2.5 - snowshu 0.0.1b3 Source cves: CVE-2024-49750 Source...