PyPI - OSV

GHSA-qqj6-54q6-cxv6

Go/github.com/snowflakedb/gosnowflake
Go/github.com/snowflakedb/gosnowflake/v2
Maven/net.snowflake:snowflake-jdbc
Maven/net.snowflake:snowflake-jdbc-fips
Maven/net.snowflake:snowflake-jdbc-thin
... 2 more

Snowflake drivers writes sensitive information to logs 9 hours ago

Fix available
Severity - 6.5 (Medium)

PYSEC-2026-3920

PyPI/snowflake-connector-python

Snowflake Connector for Python improperly verifies TLS hostnames 10 Sep

Fix available
Severity - 9.2 (Critical)

PYSEC-2026-3921

PyPI/snowflake-sqlalchemy

Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities 10 Sep

Fix available
Severity - 8.3 (High)

GHSA-5cc2-282f-jjq2

PyPI/snowflake-connector-python

Snowflake Connector for Python improperly verifies TLS hostnames 16 Jul

Fix available
Severity - 9.2 (Critical)

GHSA-8g6f-qw9x-4q6q

PyPI/snowflake-sqlalchemy

Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities 14 Jul

Fix available
Severity - 8.3 (High)

PYSEC-2026-2437

PyPI/dagster-snowflake-polars

Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations 13 Jul

Fix available
Severity - 8.3 (High)

PYSEC-2026-2436

PyPI/dagster-snowflake

Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations 13 Jul

Fix available
Severity - 8.3 (High)

PYSEC-2026-922

PyPI/snowflake-connector-python

snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS) 07 Jul

Fix available
Severity - 5.9 (Medium)

GHSA-mjw2-v2hm-wj34

PyPI/dagster
PyPI/dagster-deltalake
PyPI/dagster-duckdb
PyPI/dagster-gcp
PyPI/dagster-snowflake
... 1 more

Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations 18 Apr

Fix available
Severity - 8.3 (High)

MAL-2026-2109

PyPI/pyregions-snowflake

Malicious code in pyregions-snowflake (PyPI) 23 Mar

No fix available

GHSA-9r64-3wmc-x8m8

PyPI/apache-airflow-providers-snowflake

Apache Airflow Providers Snowflake package allows for Special Element Injection via CopyFromExternalStageToSnowflakeOperator 26 Jun 2025

Fix available
Severity - 9.8 (Critical)

PYSEC-2025-51

PyPI/apache-airflow-providers-snowflake

See record for full details 24 Jun 2025

Fix available

PYSEC-2025-26

PyPI/snowflake-connector-python
github.com/snowflakedb/snowflake-connector-python

See record for full details 29 Jan 2025

Fix available

PYSEC-2025-27

PyPI/snowflake-connector-python
github.com/snowflakedb/snowflake-connector-python

See record for full details 29 Jan 2025

Fix available

PYSEC-2025-28

PyPI/snowflake-connector-python
github.com/snowflakedb/snowflake-connector-python

See record for full details 29 Jan 2025

Fix available

GHSA-2vpq-fh52-j3wv

PyPI/snowflake-connector-python

snowflake-connector-python vulnerable to SQL Injection in write_pandas 29 Jan 2025

Fix available
Severity - 7.0 (High)

Vulnerabilities