Skip to content
OpenAdvisories

Package · PyPI

snowflake-connector-python

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Medium 6.5
    CVE-2026-86597

    Sensitive information written to logs by Snowflake drivers

    Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic…

    Snowflake Snowflake Connector for Python Snowflake JDBC Driver Snowflake JDBC Driver (Thin) npm Maven PyPI Go
  • Critical 9.2
    CVE-2026-15925

    Improper TLS Hostname Verification in Snowflake Connector for Python

    Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. An attacker with on-pa…

    Snowflake Snowflake Connector for Python snowflake-connector-python PyPI
  • Medium 4.4
    CVE-2025-24795

    The Snowflake Connector for Python uses insecure cache files permissions

    The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. On Linux …

    snowflakedb snowflake-connector-python snowflake-connector-python PyPI
  • Medium 6.7
    CVE-2025-24794

    The Snowflake Connector for Python uses insecure deserialization of the OCSP response cache

    The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. The OCSP …

    snowflakedb snowflake-connector-python snowflake-connector-python PyPI
  • High 7.0
    CVE-2025-24793

    Snowflake Connector for Python has an SQL Injection in write_pandas

    The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. A functio…

    snowflakedb snowflake-connector-python snowflake-connector-python PyPI
  • Medium 5.5
    CVE-2024-49750

    Snowflake Connector for Python has sensitive data in logs

    The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Prior to version 3.12.3, when the logging level was set by the user to DEBUG, the Connector could ha…

    snowflakedb snowflake-connector-python snowflake-connector-python PyPI
  • High 7.3
    CVE-2023-34233 Public exploit

    Snowflake Python Connector vulnerable to Command Injection

    The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Versions prior to 3.0.2 are vulnerable to command injection via single sign-on(SSO) browser URL auth…

    snowflakedb snowflake-connector-python snowflake-connector-python PyPI
  • Low 3.7
    CVE-2022-42965

    Exponential ReDoS in snowflake-connector-python leads to denial of service

    An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the undocumented get_file_transfer_type method

    snowflake-connector-python snowflake-connector-python snowflake-connector-python PyPI