OnionHop

OnionHop V3 OnionHop V3 is a modern, cross-platform desktop app Windows, macOS and Linux that routes your traffic through Tor. It can run Tor as a local SOCKS proxy or as a system-wide tunnel, automatically pick a working connection strategy for your network with Smart Connect , scan and apply...

CLEANSTART-2026-YH75013 Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node

CVE-2026-85525 affects multiple packages. Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node. See references for individual vulnerability details...

CVE-2023-34233_Proof_OF_Concept

Snowflake Connector CVE-2025-24793 PoC This repository contains Proof of Concept PoC code for testing CVE-2025-24793 vulnerability in Snowflake Connector for Python. The project includes both patched and unpatched versions to demonstrate the vulnerability and its fix. Prerequisites Docker install...

CVE-2026-41490

CVE-2026-41490 — SQL Injection in Dagster database I/O managers via dynamic partition keys Severity : High CVSS 8.3 CWE : CWE-89 — SQL Injection Affected : Dagster core = 1.13.0 and integration packages = 0.29.0 Fixed in : Dagster core 1.13.1 and integration packages 0.29.1 Advisory :...

ROOT-APP-PYPI-CVE-2025-24793 CVE-2025-24793 in snowflake-connector-python - Patched by Root

Root has patched CVE-2025-24793 in the snowflake-connector-python package for Root:PyPI. Multiple fixed versions available...

CLEANSTART-2026-BX63294 Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node

Security vulnerability affects the n8n package. Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node...

GO-2026-6665 Snowflake Go Driver writes sensitive information to logs in github.com/snowflakedb/gosnowflake

Snowflake Go Driver writes sensitive information to logs in github.com/snowflakedb/gosnowflake...

ASOS “hackers” send push notifications to customers

Thousands of global fashion retailer ASOS customers have received a push notification through the ASOS app this morning alleging that the company has been hacked. The notification, addressed to ASOS’s data protection officer and IT, says: “ASOS HACKED Dear Asos DPO and IT, we have fully compromis...

Sensitive Data Leakage

Snowflake drivers are vulnerable to Insertion of Sensitive Data Leakage. The vulnerability is due to sensitive data such as authentication tokens, encryption keys, pre-signed cloud-storage URLs, and SAML assertions being written to diagnostic logs, which allows an attacker with read access to the...

io.rtdi.appcontainer:snowflakerealm (>=0.9.2, <=0.9.3), net.snowflake:snowflake-ingest-sdk (1.1.0-unshaded) +3 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.15)

net.snowflake:snowflake-jdbc MAVEN version 3.13.15 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.rtdi.appcontainer:snowflakerealm =0.9.2, =16.16.12, =16.16.12, =16.16.12, =16.16.14 Source cves:...

pipelinewise-target-snowflake (1.11.1), rappiflow-dag-operators (>=0.2.6, <=0.3.1) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.4.1)

snowflake-connector-python PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-target-snowflake 1.11.1 - rappiflow-dag-operators =0.2.6, =0.3.1 Source cves: CVE-2026-86597...

com.codbex.atlas:codbex-atlas-application (>=2.48.0, <=2.53.0), com.codbex.gaia:codbex-gaia-application (>=2.55.0, <=2.57.0) +17 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.24.0)

net.snowflake:snowflake-jdbc MAVEN version 3.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =2.48.0, =2.55.0, =2.42.0, =2.42.0, =2.42.0, =2.42.0, =2.42....

pipelinewise-tap-snowflake (2.0.1), snowday (>=0.1.3, <=0.1.5) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.9)

snowflake-connector-python PYPI version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake 2.0.1 - snowday =0.1.3, =0.1.5 Source cves: CVE-2026-86597 Source advisory:...

io.trino:trino-iceberg (>=464, <=468), io.trino:trino-snowflake (>=464, <=468) +4 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.19.1)

net.snowflake:snowflake-jdbc MAVEN version 3.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.trino:trino-iceberg =464, =464, =1.7.0, =10.6.32, =10.6.32, =10.6.32, =10.6.34 Source cves:...

org.apache.nifi:nifi-snowflake-processors (>=2.10.0, <=2.11.0), org.apache.nifi:nifi-snowflake-processors-nar (>=2.10.0, <=2.11.0) +4 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-thin (>=4.3.0, <=4.3.2)

net.snowflake:snowflake-jdbc-thin MAVEN version =4.3.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.11.0 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

org.apache.nifi:nifi-snowflake-processors (2.8.0), org.apache.nifi:nifi-snowflake-processors-nar (2.8.0) +5 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-thin (3.28.0)

net.snowflake:snowflake-jdbc-thin MAVEN version 3.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc-thin and may be impacted: - org.apache.nifi:nifi-snowflake-processors 2.8.0 -...

target-snowflake (0.0.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (1.8.7)

snowflake-connector-python PYPI version 1.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - target-snowflake 0.0.0 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

io.apiman:apiman-manager-api-jpa (>=3.0.0.rc6, <=3.1.3.final), io.apiman:apiman-manager-api-micro (>=3.0.0.rc6, <=3.1.3.final) +8 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.21)

net.snowflake:snowflake-jdbc MAVEN version 3.13.21 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.apiman:apiman-manager-api-jpa =3.0.0.rc6, =3.0.0.rc6, =3.0.0.rc6, =3.0.0.rc6, =4.15.0, =16.17.1,...

com.codbex.atlas:codbex-atlas-application (>=2.97.0, <=14.49.0), com.codbex.gaia:codbex-gaia-application (>=2.73.0, <=14.49.0) +50 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (>=4.0.0, <=4.3.3)

net.snowflake:snowflake-jdbc MAVEN version =4.0.0, =2.97.0, =2.73.0, =2.72.0, =2.72.0, =2.65.0, =2.68.0, =3.27.0, =2.64.0, =0.10.0, =0.10.0, =0.10.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.3 and more Source cves: CVE-2026-86597 Source advisory: GHSA-QQJ6-54Q6-CXV6...

db-schemachange (>=0.0.1, <=0.0.7), fdc-shared-kernel (>=0.0.151, <=0.0.206) +4 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.16.0)

snowflake-connector-python PYPI version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - db-schemachange =0.0.1, =0.0.151, =3.0.4, =0.1.0, =0.2.4 Source cves: CVE-2026-86597 Source advisory:...