Incorrect Permission Assignment for Critical Resource

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the ConfigManager.readconfig path in configmanager.py. An attacker can modify sensitive settings stored in the...

EUVD-2025-0179

Malicious code in bioql PyPI...

CVE-2022-42965

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented getfiletransfertype method...

Credential Caching

snowflakeconnectorpython is vulnerable to Credential Caching. The vulnerability is due to improper handling of temporary credential caching on Linux systems, When caching is enabled, the credentials are stored in a file that is readable by all users, allowing unauthorized access...

acedeploy (>=2.4.15, <=2.4.115), acepolicies (>=0.1.17, <=0.1.23) +105 more potentially affected by CVE-2025-24794 via snowflake-connector-python (>=2.7.12, <=3.13.0)

snowflake-connector-python PYPI version =2.7.12, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =20241210.4.0, =20230717.1.0, =20240129.2.0 - clope 0.1.2 and more Source cves: CVE-2025-24794 Source advisory: OSV:PYSEC-2025-27...

acedeploy (>=2.4.15, <=2.4.115), acepolicies (>=0.1.17, <=0.1.23) +131 more potentially affected by CVE-2025-24795 via snowflake-connector-python (>=2.3.7, <=3.13.0)

snowflake-connector-python PYPI version =2.3.7, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =2.4.0rc1, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =20241210.4.0, =20230717.1.0, =20240129.2.0 and more Source cves: CVE-2025-24795 Source advisory: OSV:PYSEC-2025-28...

acedeploy (>=2.4.15, <=2.4.115), acepolicies (>=0.1.17, <=0.1.23) +138 more potentially affected by CVE-2025-24793 via snowflake-connector-python (>=2.2.5, <=3.13.0)

snowflake-connector-python PYPI version =2.2.5, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =2.4.0rc1, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =20241210.4.0, =20250324.2.0 and more Source cves: CVE-2025-24793 Source advisory: OSV:PYSEC-2025-26...

CVE-2025-24793

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. A function from the...

acedeploy (>=2.4.15, <=2.4.115), acepolicies (>=0.1.17, <=0.1.23) +138 more potentially affected by CVE-2025-24793 via snowflake-connector-python (>=2.2.5, <=3.13.0)

snowflake-connector-python PYPI version =2.2.5, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =2.4.0rc1, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =20241210.4.0, =20250324.2.0 and more Source cves: CVE-2025-24793 Source advisory: SNYK:PYTHON-SNOWFLAKECONNECTORPYTHON-8674928...

acedeploy (>=2.4.15, <=2.4.115), acepolicies (>=0.1.17, <=0.1.23) +138 more potentially affected by CVE-2025-24793 via snowflake-connector-python (>=2.2.5, <=3.13.0)

snowflake-connector-python PYPI version =2.2.5, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =2.4.0rc1, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =20241210.4.0, =20250324.2.0 and more Source cves: CVE-2025-24793 Source advisory: OSV:GHSA-2VPQ-FH52-J3WV...

acedeploy (>=2.4.15, <=2.4.115), acepolicies (>=0.1.17, <=0.1.23) +138 more potentially affected by CVE-2025-24793 via snowflake-connector-python (>=2.2.5, <=3.13.0)

snowflake-connector-python PYPI version =2.2.5, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =2.4.0rc1, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =20241210.4.0, =20250324.2.0 and more Source cves: CVE-2025-24793 Source advisory: GHSA-2VPQ-FH52-J3WV...

acedeploy (>=2.4.15, <=2.4.115), acepolicies (>=0.1.17, <=0.1.23) +105 more potentially affected by CVE-2025-24794 via snowflake-connector-python (>=2.7.12, <=3.13.0)

snowflake-connector-python PYPI version =2.7.12, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =20241210.4.0, =20230717.1.0, =20240129.2.0 - clope 0.1.2 and more Source cves: CVE-2025-24794 Source advisory: OSV:GHSA-M4F6-VCJ4-W5MX...

acedeploy (>=2.4.15, <=2.4.115), acepolicies (>=0.1.17, <=0.1.23) +105 more potentially affected by CVE-2025-24794 via snowflake-connector-python (>=2.7.12, <=3.13.0)

snowflake-connector-python PYPI version =2.7.12, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =20241210.4.0, =20230717.1.0, =20240129.2.0 - clope 0.1.2 and more Source cves: CVE-2025-24794 Source advisory: GHSA-M4F6-VCJ4-W5MX...

GHSA-M4F6-VCJ4-W5MX snowflake-connector-python vulnerable to insecure deserialization of the OCSP response cache

Issue Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. The OCSP response cache uses pickle as the serialization format, potentially leading to local privilege escalation. This vulnerability affects versions 2.7.12 through 3.13.0. Snowflake fixed the issue...

Deserialization of Untrusted Data

Overview snowflake-connector-python is a Snowflake Connector for Python Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the insecure handling of serialization exceptions which is not supported for all exceptions. This is because The OCSP response cache...

acedeploy (>=2.4.15, <=2.4.115), acepolicies (>=0.1.17, <=0.1.23) +105 more potentially affected by CVE-2025-24794 via snowflake-connector-python (>=2.7.12, <=3.13.0)

snowflake-connector-python PYPI version =2.7.12, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =20241210.4.0, =20230717.1.0, =20240129.2.0 - clope 0.1.2 and more Source cves: CVE-2025-24794 Source advisory: SNYK:PYTHON-SNOWFLAKECONNECTORPYTHON-8674...

acedeploy (>=2.4.15, <=2.4.115), acepolicies (>=0.1.17, <=0.1.23) +131 more potentially affected by CVE-2025-24795 via snowflake-connector-python (>=2.3.7, <=3.13.0)

snowflake-connector-python PYPI version =2.3.7, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =2.4.0rc1, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =20241210.4.0, =20230717.1.0, =20240129.2.0 and more Source cves: CVE-2025-24795 Source advisory: SNYK:PYTHON-SNOWFLAKECONNECTORPYTHON-8675785...

acedeploy (>=2.4.15, <=2.4.115), acepolicies (>=0.1.17, <=0.1.23) +131 more potentially affected by CVE-2025-24795 via snowflake-connector-python (>=2.3.7, <=3.13.0)

snowflake-connector-python PYPI version =2.3.7, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =2.4.0rc1, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =20241210.4.0, =20230717.1.0, =20240129.2.0 and more Source cves: CVE-2025-24795 Source advisory: OSV:GHSA-R2X6-CJG7-8R43...

acedeploy (>=2.4.15, <=2.4.115), acepolicies (>=0.1.17, <=0.1.23) +131 more potentially affected by CVE-2025-24795 via snowflake-connector-python (>=2.3.7, <=3.13.0)

snowflake-connector-python PYPI version =2.3.7, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0.dev1, =0.0.1a4.post0, =2.4.0rc1, =1.0.23, =0.1.3, =0.1.0, =1.13.21, =20241210.4.0, =20230717.1.0, =20240129.2.0 and more Source cves: CVE-2025-24795 Source advisory: GHSA-R2X6-CJG7-8R43...

GHSA-R2X6-CJG7-8R43 snowflake-connector-python vulnerable to insecure cache files permissions

Issue Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. On Linux systems, when temporary credential caching is enabled, the Snowflake Connector for Python will cache temporary credentials locally in a world-readable file. This vulnerability affects version...