Snowflake Connector For Python (Snowflake) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-08. Vendor: Snowflake.

CVEs of Snowflake Connector For Python

• CVE-2026-86600 - CVSS 8.2 (high), 2026-09-08: In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without…
• CVE-2026-86597 - CVSS 6.5 (medium), 2026-09-08: Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens,…
• CVE-2026-85525 - CVSS 7.4 (high), 2026-09-04: Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because…
• CVE-2026-15925 - CVSS 9.2 (critical), 2026-07-16: Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to…