snowflake-sqlalchemy (>=1.0.9, <=1.1.14), target-snowflake (0.0.2) potentially affected by CVE-2026-86597 via snowflake-connector-python (1.9.1)

snowflake-connector-python PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-sqlalchemy =1.0.9, =1.1.14 - target-snowflake 0.0.2 Source cves: CVE-2026-86597 Source advisory:...

alchemy-modelgen (>=0.1.6, <=0.1.6.1), altimate-dataminion (>=0.0.1, <=0.2.5) +52 more potentially affected by CVE-2026-15736 via snowflake-sqlalchemy (>=1.2.0, <=1.9.0)

snowflake-sqlalchemy PYPI version =1.2.0, =0.1.6, =0.0.1, =1.0.0, =1.0.0rc1, =0.1.0, =1.0.1, =0.5.1, =1.0.5, =2.15.2, =0.2.1, =0.1.1, =0.1.0, =0.1.0a4, =0.0.7, =0.1.30, =0.9.5 and more Source cves: CVE-2026-15736 Source advisory: OSV:PYSEC-2026-3921...

Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

snowflake-sqlalchemy (>=1.0.9, <=1.1.14), target-snowflake (0.0.2) potentially affected by CVE-2026-15925 via snowflake-connector-python (1.9.1)

snowflake-connector-python PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-sqlalchemy =1.0.9, =1.1.14 - target-snowflake 0.0.2 Source cves: CVE-2026-15925 Source advisory:...

PYSEC-2026-3921 Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

snowflake-sqlalchemy (>=1.0.9, <=1.1.14), target-snowflake (0.0.2) potentially affected by CVE-2026-15925 via snowflake-connector-python (1.9.1)

snowflake-connector-python PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-sqlalchemy =1.0.9, =1.1.14 - target-snowflake 0.0.2 Source cves: CVE-2026-15925 Source advisory:...

SQL Injection

Overview snowflake-sqlalchemy is a Snowflake SQLAlchemy Dialect Affected versions of this package are vulnerable to SQL Injection via improper handling of user-supplied input in merge operations and table creation queries. An attacker can execute unauthorized SQL commands or read arbitrary files ...

alchemy-modelgen (>=0.1.6, <=0.1.6.1), altimate-dataminion (>=0.0.1, <=0.2.5) +52 more potentially affected by CVE-2026-15736 via snowflake-sqlalchemy (>=1.2.0, <=1.9.0)

snowflake-sqlalchemy PYPI version =1.2.0, =0.1.6, =0.0.1, =1.0.0, =1.0.0rc1, =0.1.0, =1.0.1, =0.5.1, =1.0.5, =2.15.2, =0.2.1, =0.1.1, =0.1.0, =0.1.0a4, =0.0.7, =0.1.30, =0.9.5 and more Source cves: CVE-2026-15736 Source advisory: SNYK:PYTHON-SNOWFLAKESQLALCHEMY-17972388...

alchemy-modelgen (>=0.1.6, <=0.1.6.1), altimate-dataminion (>=0.0.1, <=0.2.5) +52 more potentially affected by CVE-2026-15736 via snowflake-sqlalchemy (>=1.2.0, <=1.9.0)

snowflake-sqlalchemy PYPI version =1.2.0, =0.1.6, =0.0.1, =1.0.0, =1.0.0rc1, =0.1.0, =1.0.1, =0.5.1, =1.0.5, =2.15.2, =0.2.1, =0.1.1, =0.1.0, =0.1.0a4, =0.0.7, =0.1.30, =0.9.5 and more Source cves: CVE-2026-15736 Source advisory: GHSA-8G6F-QW9X-4Q6Q...

alchemy-modelgen (>=0.1.6, <=0.1.6.1), altimate-dataminion (>=0.0.1, <=0.2.5) +52 more potentially affected by CVE-2026-15736 via snowflake-sqlalchemy (>=1.2.0, <=1.9.0)

snowflake-sqlalchemy PYPI version =1.2.0, =0.1.6, =0.0.1, =1.0.0, =1.0.0rc1, =0.1.0, =1.0.1, =0.5.1, =1.0.5, =2.15.2, =0.2.1, =0.1.1, =0.1.0, =0.1.0a4, =0.0.7, =0.1.30, =0.9.5 and more Source cves: CVE-2026-15736 Source advisory: OSV:GHSA-8G6F-QW9X-4Q6Q...

GHSA-8G6F-QW9X-4Q6Q Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

CVE-2026-15736

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

CVE-2026-15736

Snowflake SQLAlchemy

CVE-2026-15736 Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemy

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

CVE-2026-15736

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

EUVD-2026-43679

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

CVE-2026-15736 Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemy

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

CVE-2026-15736 Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemy

Snowflake SQLAlchemy versions prior to 1.11.0 contain several security vulnerabilities, including: Improper handling of user-supplied column identifiers in merge operations could allow SQL injection through attacker-controlled input keys. An attacker may be able to exploit this through request...

alchemy-modelgen (>=0.1.6, <=0.1.6.1), altimate-dataminion (>=0.0.1, <=0.2.5) +52 more potentially affected by CVE-2026-15736 via snowflake-sqlalchemy (>=1.2.0, <=1.9.0)

snowflake-sqlalchemy PYPI version =1.2.0, =0.1.6, =0.0.1, =1.0.0, =1.0.0rc1, =0.1.0, =1.0.1, =0.5.1, =1.0.5, =2.15.2, =0.2.1, =0.1.1, =0.1.0, =0.1.0a4, =0.0.7, =0.1.30, =0.9.5 and more Source cves: CVE-2026-15736 Source advisory: MEND:CVE-2026-15736...