io.kestra.plugin:plugin-jdbc-snowflake (>=0.16.0, <=0.16.1), io.squashql:squashql-snowflake (>=1.17.1, <=1.18.2) +2 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.15.1)

net.snowflake:snowflake-jdbc MAVEN version 3.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.kestra.plugin:plugin-jdbc-snowflake =0.16.0, =1.17.1, =445, =446 Source cves: CVE-2026-86597 Source...

io.trino:trino-iceberg (>=454, <=456), io.trino:trino-snowflake (>=454, <=456) +7 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.18.0)

net.snowflake:snowflake-jdbc MAVEN version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.trino:trino-iceberg =454, =454, =2.2.1, =10.6.19, =0.1.0, =16.22.1, =16.22.1, =16.22.1, =16.22.1,...

com.codbex.atlas:codbex-atlas-application (>=2.2.0, <=2.10.0), com.codbex.hades:codbex-hades-application (>=2.2.0, <=2.10.0) +15 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.23.0)

net.snowflake:snowflake-jdbc MAVEN version 3.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.0.0, =2.2.0, =11.5.0,...

io.github.deepakvijayakumar14:kotlin-snowflake (>=0.2.0, <=0.3.0), io.squashql:squashql-snowflake (>=1.19.0, <=1.19.10) +2 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.16.0)

net.snowflake:snowflake-jdbc MAVEN version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.github.deepakvijayakumar14:kotlin-snowflake =0.2.0, =1.19.0, =447, =447, =449 Source cves:...

CVE-2026-34214

A flaw was found in Trino's Iceberg connector. Users with SQL write privileges can access static or temporary credentials for the Iceberg connector REST catalog. This unauthorized access to credentials could lead to sensitive information disclosure. Mitigation Mitigation for this issue is either...

io.github.jordepic:dataharness-trino (>=1.0, <=2.0) potentially affected by CVE-2026-34214 via io.trino:trino-iceberg (476)

io.trino:trino-iceberg MAVEN version 476 is affected by a known vulnerability. The following packages have a transitive dependency on io.trino:trino-iceberg and may be impacted: - io.github.jordepic:dataharness-trino =1.0, =2.0 Source cves: CVE-2026-34214 Source advisory: MEND:CVE-2026-34214...

CVE-2026-34214

Trino is a distributed SQL query engine for big data analytics. From version 439 to before version 480, Iceberg connector REST catalog static credentials access key or vended credentials temporary access key are accessible to users that have write privilege on SQL level. This issue has been patch...

io.github.jordepic:dataharness-trino (>=1.0, <=2.0) potentially affected by CVE-2026-34214 via io.trino:trino-iceberg (476)

io.trino:trino-iceberg MAVEN version 476 is affected by a known vulnerability. The following packages have a transitive dependency on io.trino:trino-iceberg and may be impacted: - io.github.jordepic:dataharness-trino =1.0, =2.0 Source cves: CVE-2026-34214 Source advisory: GHSA-X27P-5F68-M644...

Improper Removal of Sensitive Information Before Storage or Transfer

Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer via /ui/api/query/«queryid» and /v1/query/«queryid» endpoints. An attacker can obtain sensitive credentials by accessing the serialized query JSON after performing wri...

io.github.jordepic:dataharness-trino (>=1.0, <=2.0) potentially affected by CVE-2026-34214 via io.trino:trino-iceberg (476)

io.trino:trino-iceberg MAVEN version 476 is affected by a known vulnerability. The following packages have a transitive dependency on io.trino:trino-iceberg and may be impacted: - io.github.jordepic:dataharness-trino =1.0, =2.0 Source cves: CVE-2026-34214 Source advisory: OSV:GHSA-X27P-5F68-M644...

io.trino:trino-iceberg (>=454, <=456), io.trino:trino-snowflake (>=454, <=456) +7 more potentially affected by CVE-2026-3293 via net.snowflake:snowflake-jdbc (3.18.0)

net.snowflake:snowflake-jdbc MAVEN version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.trino:trino-iceberg =454, =454, =2.2.1, =10.6.19, =0.1.0, =16.22.1, =16.22.1, =16.22.1, =16.22.1,...

com.codbex.atlas:codbex-atlas-application (>=2.2.0, <=2.10.0), com.codbex.hades:codbex-hades-application (>=2.2.0, <=2.10.0) +15 more potentially affected by CVE-2026-3293 via net.snowflake:snowflake-jdbc (3.23.0)

net.snowflake:snowflake-jdbc MAVEN version 3.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.0.0, =2.2.0, =11.5.0,...

io.github.deepakvijayakumar14:kotlin-snowflake (>=0.2.0, <=0.3.0), io.squashql:squashql-snowflake (>=1.19.0, <=1.19.10) +2 more potentially affected by CVE-2026-3293 via net.snowflake:snowflake-jdbc (3.16.0)

net.snowflake:snowflake-jdbc MAVEN version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.github.deepakvijayakumar14:kotlin-snowflake =0.2.0, =1.19.0, =447, =447, =449 Source cves:...

io.kestra.plugin:plugin-jdbc-snowflake (>=0.16.0, <=0.16.1), io.squashql:squashql-snowflake (>=1.17.1, <=1.18.2) +2 more potentially affected by CVE-2026-3293 via net.snowflake:snowflake-jdbc (3.15.1)

net.snowflake:snowflake-jdbc MAVEN version 3.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.kestra.plugin:plugin-jdbc-snowflake =0.16.0, =1.17.1, =445, =446 Source cves: CVE-2026-3293 Source...

io.kestra.plugin:plugin-jdbc-snowflake (0.17.0), io.trino:trino-iceberg (>=450, <=451) +9 more potentially affected by CVE-2026-3293 via net.snowflake:snowflake-jdbc (3.16.1)

net.snowflake:snowflake-jdbc MAVEN version 3.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.kestra.plugin:plugin-jdbc-snowflake 0.17.0 - io.trino:trino-iceberg =450, =450, =2.1.2,...

com.datasqrl:sqrl-discovery (>=0.9.0-alpha1, <=0.9.1), com.datasqrl:sqrl-planner (>=0.9.0-alpha1, <=0.9.1) +12 more potentially affected by CVE-2026-3293 via net.snowflake:snowflake-jdbc (3.27.1)

net.snowflake:snowflake-jdbc MAVEN version 3.27.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.datasqrl:sqrl-discovery =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =12.49.0, =12.49.0, =12.49.0,...