snowflake-cli (3.11.0), snowflake-cli-labs (3.11.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.17.2)

snowflake-connector-python PYPI version 3.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-cli 3.11.0 - snowflake-cli-labs 3.11.0 Source cves: CVE-2026-86597 Source advisory:...

io.kestra.plugin:plugin-jdbc-snowflake (0.9.0), io.squashql:squashql-snowflake (>=1.1.0, <=1.3.1) +9 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.30)

net.snowflake:snowflake-jdbc MAVEN version 3.13.30 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.kestra.plugin:plugin-jdbc-snowflake 0.9.0 - io.squashql:squashql-snowflake =1.1.0, =2.0.1,...

unskript-cloudnative-observability (>=0.1.4, <=1.0.1456) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.6)

snowflake-connector-python PYPI version 2.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - unskript-cloudnative-observability =0.1.4, =1.0.1456 Source cves: CVE-2026-86597 Source advisory:...

create-graphene (>=0.0.24, <=0.0.30) potentially affected by CVE-2026-86597 via snowflake-sdk (3.1.0)

snowflake-sdk NPM version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-sdk and may be impacted: - create-graphene =0.0.24, =0.0.30 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

cadpr (>=0.1.0, <=0.1.1), nikeca (>=0.0.83, <=0.2.13) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.0.0)

snowflake-connector-python PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - cadpr =0.1.0, =0.0.83, =0.2.13 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

io.kestra.plugin:plugin-jdbc-snowflake (>=0.4.1, <=0.4.2) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.16)

net.snowflake:snowflake-jdbc MAVEN version 3.13.16 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.kestra.plugin:plugin-jdbc-snowflake =0.4.1, =0.4.2 Source cves: CVE-2026-86597 Source advisory:...

omnata-plugin-devkit (>=0.5.3, <=0.11.0), omnata-plugin-runtime (>=0.5.0a112, <=0.11.9) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.0)

snowflake-connector-python PYPI version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - omnata-plugin-devkit =0.5.3, =0.5.0a112, =0.11.9 - snowflake-cli-labs 3.0.0rc0 Source cves: CVE-2026-86597...

com.datasqrl:sqrl-discovery (0.7.2), com.datasqrl:sqrl-planner (0.7.2) +7 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.26.0)

net.snowflake:snowflake-jdbc MAVEN version 3.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.datasqrl:sqrl-discovery 0.7.2 - com.datasqrl:sqrl-planner 0.7.2 -...

io.castled:connectors (>=0.1.15-alpha, <=1.0.0), org.flywaydb.enterprise:flyway-commandline (>=7.7.2, <=8.2.0) +4 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.1)

net.snowflake:snowflake-jdbc MAVEN version 3.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.castled:connectors =0.1.15-alpha, =7.7.2, =7.7.2, =9.2.0 - us.fatehi:schemacrawler-distrib 16.14.2 ...

NPM: Snowflake drivers writes sensitive information to logs

NPM: Snowflake drivers writes sensitive information to logs vulnerability discovered by ? in WordPress Npm snowflake-sdk versions 3.3.0...

io.trino:trino-iceberg (>=454, <=456), io.trino:trino-snowflake (>=454, <=456) +7 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.18.0)

net.snowflake:snowflake-jdbc MAVEN version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.trino:trino-iceberg =454, =454, =2.2.1, =10.6.19, =0.1.0, =16.22.1, =16.22.1, =16.22.1, =16.22.1,...

com.codbex.atlas:codbex-atlas-application (>=2.71.0, <=2.75.0), com.codbex.gaia:codbex-gaia-application (>=2.65.0, <=2.67.0) +13 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.25.0)

net.snowflake:snowflake-jdbc MAVEN version 3.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =2.71.0, =2.65.0, =2.57.0, =2.62.0, =2.56.0, =2.58.0, =3.17....

airbyte (>=0.11.0, <=0.27.0), airbyte-destination-pgvector (>=0.1.0, <=0.1.4) +119 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.18.1)

snowflake-connector-python PYPI version 3.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - airbyte =0.11.0, =0.1.0, =0.0.1, =0.1.5, =0.1.1, =0.4.6, =0.0.25, =0.1.9, =1.0.5, =1.0.1, =2.0.2, =2.1.0 an...

dbt-schema-builder (>=0.4.3, <=0.4.4), dbt-snowflake (>=1.0.0rc1, <=1.0.1) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.10)

snowflake-connector-python PYPI version 2.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt-schema-builder =0.4.3, =1.0.0rc1, =0.1.1, =0.2.7 - elementary-lineage 0.1.0 Source cves: CVE-2026-86597...

io.squashql:squashql-snowflake (>=1.4.0, <=1.4.2), org.eclipse.dirigible:dirigible-application (>=8.16.0, <=8.18.4) +4 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.14.2)

net.snowflake:snowflake-jdbc MAVEN version 3.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.squashql:squashql-snowflake =1.4.0, =8.16.0, =16.20.5, =16.20.5, =16.20.5, =16.20.5, =16.20.6 Sourc...

cloeextensions (>=20231128.1.0, <=20240129.2.0), core-db (1.0.0) +5 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.5.0)

snowflake-connector-python PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - cloeextensions =20231128.1.0, =4.3.0, =0.5.1, =0.2.1, =0.1.0, =0.2.1 - snowflake-cli-labs 2.0.0a1 Source cve...

com.netflix.metacat:metacat-connector-snowflake (>=1.2.0, <=1.3.1) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.4.2)

net.snowflake:snowflake-jdbc MAVEN version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.netflix.metacat:metacat-connector-snowflake =1.2.0, =1.3.1 Source cves: CVE-2026-86597 Source...

dagster-snowflake (>=0.21.8, <=0.22.3), dagster-snowflake-pandas (>=0.21.8, <=0.22.3) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.4.1)

snowflake-connector-python PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dagster-snowflake =0.21.8, =0.21.8, =0.21.8, =0.22.3 - quacker 0.6.2 Source cves: CVE-2026-86597 Source...

dbt (>=0.16.0b2, <=0.18.0b2), dbt-schema-builder (>=0.1.0, <=0.2.2) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.1)

snowflake-connector-python PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt =0.16.0b2, =0.1.0, =0.16.0b2, =0.2.0, =0.2.5 - snowshu 0.0.1b3 Source cves: CVE-2026-86597 Source...

com.linkedin.iceberg:iceberg-snowflake (>=v1.2.0.1-1-gadc43b8, <=1.2.0.25), dev.ocpd.liquibase.ext:liquibase-hibernate5 (4.18.0-b6) +12 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.22)

net.snowflake:snowflake-jdbc MAVEN version 3.13.22 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.linkedin.iceberg:iceberg-snowflake =v1.2.0.1-1-gadc43b8, =9.15.2, =0.5.0, =2.11.0-spark3.1,...