Snowflake Connector for Python

3 results · Clear filters · Feed

• High 8.1
  CVE-2026-123859

  SQL Injection via unescaped DataFrame column names in Snowflake Connector for Python and Snowflake Connector for Python (Universal Core)

  When identifier escaping is disabled through a non-default configuration, the write_pandas() data-loading functionality in the Snowflake Connector for Python and the Snowflake Connector for Python (Universal Core) did not escape DataFrame column names before …

  Snowflake Snowflake Connector for Python Snowflake Connector for Python (Universal Core)
  Nov 6, 2026
• High 8.2
  CVE-2026-86600

  Workload identity attestation generated before login host validation in Snowflake drivers

  In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint. An attacker who can modify the connection configu…

  Snowflake Snowflake Connector for Python Snowflake PHP PDO Driver Snowflake JDBC Driver (FIPS)
  Sep 8, 2026
• High 7.4
  CVE-2026-85525

  Improper OCSP response validation in Snowflake drivers

  Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification f…

  Snowflake Snowflake Connector for Python Snowflake JDBC Driver Snowflake JDBC Driver (Thin)
  Sep 4, 2026