Insertion of Sensitive Information into Log File

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the logging process. An attacker can obtain authentication tokens, encryption keys, pre-signed URLs, and SAML assertions...

acedeploy (>=2.4.15, <=2.4.366.dev1), acepolicies (>=0.1.17, <=0.1.23) +286 more potentially affected by CVE-2026-86597 via snowflake-connector-python (>=1.7.11, <=4.7.2)

snowflake-connector-python PYPI version =1.7.11, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0, =0.1.0.dev1, =0.0.1a4.post0, =1.0.6, =0.0.1, =0.1.0, =2020.5.20rc1, =1.0.0b2, =2.5.1 - arreyy 0.0.1 and more Source cves: CVE-2026-86597 Source advisory: MEND:CVE-2026-86597...

ae-mcp (0.2.0), analytics-agent-connector-snowflake (>=0.1.0, <=0.4.0) +30 more potentially affected by CVE-2026-85525 via snowflake-connector-python (>=4.0.0, <=4.7.2)

snowflake-connector-python PYPI version =4.0.0, =0.1.0, =2020.5.20rc1, =1.0.0b2, =0.185.0, =1.0.3, =1.0.0, =0.1.0, =1.10.7, =2.79.1a0, =3.0.0, =3.0.1.post1 - klondike 0.3.0 - lib2dlp 0.0.10 and more Source cves: CVE-2026-85525 Source advisory: SNYK:PYTHON-SNOWFLAKECONNECTORPYTHON-19638983...

Improper Certificate Validation

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Improper Certificate Validation in the OCSP processing functionality, which accepts an OCSP response without checking that its CertID matches the certificate being validated...

acedeploy (>=2.4.15, <=2.4.366.dev1), acepolicies (>=0.1.17, <=0.1.23) +286 more potentially affected by CVE-2026-85525 via snowflake-connector-python (>=1.7.11, <=4.7.2)

snowflake-connector-python PYPI version =1.7.11, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0, =0.1.0.dev1, =0.0.1a4.post0, =1.0.6, =0.0.1, =0.1.0, =2020.5.20rc1, =1.0.0b2, =2.5.1 - arreyy 0.0.1 and more Source cves: CVE-2026-85525 Source advisory: MEND:CVE-2026-85525...

dbcat (0.3.1), pipelinewise-target-snowflake (1.11.0) +1 more potentially affected by CVE-2026-15925 via snowflake-connector-python (2.3.10)

snowflake-connector-python PYPI version 2.3.10 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbcat 0.3.1 - pipelinewise-target-snowflake 1.11.0 - pydbconnector-jinghan-ma =0.0.4, =0.0.5 Source cves:...

analytics-agent-connector-snowflake (>=0.1.0, <=0.4.0), apache-airflow-backport-providers-snowflake (>=2020.5.20rc1, <=2021.3.13) +29 more potentially affected by CVE-2026-15925 via snowflake-connector-python (>=4.0.0, <=4.7.0)

snowflake-connector-python PYPI version =4.0.0, =0.1.0, =2020.5.20rc1, =1.0.0b2, =0.185.0, =1.0.3, =1.0.0, =0.1.0, =1.10.7, =2.79.1a0, =3.0.0, =0.6.1, =0.14.0 and more Source cves: CVE-2026-15925 Source advisory: GHSA-5CC2-282F-JJQ2...

ewah (>=0.1.25, <=0.2.5), fivetran-autogen (>=0.0.1rc8, <=0.0.1rc9) +6 more potentially affected by CVE-2026-15925 via snowflake-connector-python (2.0.2)

snowflake-connector-python PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - ewah =0.1.25, =0.0.1rc8, =0.0.2, =2.2.0, =0.14.1, =0.110.1, =2.0.0, =2.1.0 - spswarehouse-airflow 0.6.3 Sour...

dv-pyclient (>=0.5.1, <=0.6.0), snowctl (>=1.0.6, <=1.0.9) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.2.4)

snowflake-connector-python PYPI version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dv-pyclient =0.5.1, =1.0.6, =1.0.9 Source cves: CVE-2026-15925 Source advisory: OSV:GHSA-5CC2-282F-JJQ2...

pipelinewise-tap-snowflake (2.0.1), snowday (>=0.1.3, <=0.1.5) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.2.9)

snowflake-connector-python PYPI version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake 2.0.1 - snowday =0.1.3, =0.1.5 Source cves: CVE-2026-15925 Source advisory:...

pipelinewise-tap-snowflake (2.0.3), pipelinewise-target-snowflake (1.10.1) +1 more potentially affected by CVE-2026-15925 via snowflake-connector-python (2.3.7)

snowflake-connector-python PYPI version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake 2.0.3 - pipelinewise-target-snowflake 1.10.1 - snowmobile =0.2.0b16, =0.2.0b25...

kzr-snowflake (>=0.0.4, <=0.0.9), snowypushy (>=0.2.0, <=0.4.3) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.6.2)

snowflake-connector-python PYPI version 2.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - kzr-snowflake =0.0.4, =0.2.0, =0.4.3 Source cves: CVE-2026-15925 Source advisory: OSV:GHSA-5CC2-282F-JJQ2...

monosi (>=0.0.1.post1, <=0.0.2.post5), monosi-server (0.0.1) +1 more potentially affected by CVE-2026-15925 via snowflake-connector-python (2.7.2)

snowflake-connector-python PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - monosi =0.0.1.post1, =0.0.2.post5 - monosi-server 0.0.1 - snowshu 0.0.4a1 Source cves: CVE-2026-15925 Source...

snowchange (>=0.0.1, <=0.0.4.post1) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.2.6)

snowflake-connector-python PYPI version 2.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowchange =0.0.1, =0.0.4.post1 Source cves: CVE-2026-15925 Source advisory: OSV:GHSA-5CC2-282F-JJQ2...

pipelinewise-target-snowflake (1.11.1), rappiflow-dag-operators (>=0.2.6, <=0.3.1) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.4.1)

snowflake-connector-python PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake 1.11.1 - rappiflow-dag-operators =0.2.6, =0.3.1 Source cves: CVE-2026-15925...

arreyy (0.0.1), dbt-schema-builder (>=0.4.5, <=0.4.13) +6 more potentially affected by CVE-2026-15925 via snowflake-connector-python (2.7.12)

snowflake-connector-python PYPI version 2.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - arreyy 0.0.1 - dbt-schema-builder =0.4.5, =1.1.0b1, =0.0.1, =0.0.1, =1.15.0, =2.2.0 - pyexql 0.0.1 Source...

database-factory (>=1.0.5, <=1.0.6), mage-ai (>=0.1.0, <=0.2.8) +1 more potentially affected by CVE-2026-15925 via snowflake-connector-python (2.7.9)

snowflake-connector-python PYPI version 2.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - database-factory =1.0.5, =0.1.0, =1.4.0, =2.0.4 Source cves: CVE-2026-15925 Source advisory:...

cdwutils (>=1.13.21, <=1.13.29), dbd (>=0.6.8, <=0.8.9) +30 more potentially affected by CVE-2026-15925 via snowflake-connector-python (2.9.0)

snowflake-connector-python PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - cdwutils =1.13.21, =0.6.8, =0.1.0, =0.5.0, =0.1.28, =2.1.0, =1.0.60b0, =0.0.1, =0.2.0, =0.1.0, =0.1.0, =1.0....

pipelinewise-target-snowflake (>=1.2.0, <=1.8.0), schemaql (>=0.0.2, <=0.0.4) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.0.3)

snowflake-connector-python PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake =1.2.0, =0.0.2, =0.0.4 Source cves: CVE-2026-15925 Source advisory:...

pipelinewise-tap-snowflake (>=1.1.1, <=2.0.0) potentially affected by CVE-2026-15925 via snowflake-connector-python (2.2.2)

snowflake-connector-python PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake =1.1.1, =2.0.0 Source cves: CVE-2026-15925 Source advisory: OSV:GHSA-5CC2-282F-JJ...