All products

snowflake-connector-python

PyPI · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Snowflake drivers writes sensitive information to logsCVE-2026-86597 · GHSA-QQJ6-54Q6-CXV6Version ranges need review. github.com/snowflakedb/gosnowflake/v2github.com/snowflakedb/gosnowflake GoMavennpmPyPI Medium Fix reported
Snowflake Connector for Python improperly verifies TLS hostnamesCVE-2026-15925 · GHSA-5CC2-282F-JJQ2Version ranges need review. snowflake-connector-python PyPI Critical Fix reported
snowflake-connector-python vulnerable to insecure cache files permissionsCVE-2025-24795 · GHSA-R2X6-CJG7-8R43Version ranges need review. snowflake-connector-python PyPI Medium Fix reported
snowflake-connector-python vulnerable to insecure deserialization of the OCSP response cacheCVE-2025-24794 · GHSA-M4F6-VCJ4-W5MXVersion ranges need review. snowflake-connector-python PyPI Medium Fix reported
snowflake-connector-python vulnerable to SQL Injection in write_pandasCVE-2025-24793 · GHSA-2VPQ-FH52-J3WVVersion ranges need review. snowflake-connector-python PyPI High Fix reported
The Snowflake Connector for Python stores sensitive data in logsCVE-2024-49750 · GHSA-5VVG-PVHP-HV2MVersion ranges need review. snowflake-connector-python PyPI Medium Fix reported
snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)CVE-2022-42965 · GHSA-4R6J-FWCX-94CFVersion ranges need review. snowflake-connector-python PyPI Medium Fix reported
Snowflake Python Connector vulnerable to Command InjectionCVE-2023-34233 · GHSA-5W5M-PFW9-C8FPVersion ranges need review. snowflake-connector-python PyPI High Fix reported