Snowflake Snowflake Connector for Python vulnerabilities

Newest CVEs

• CVE-2026-123859

  SQL Injection via unescaped DataFrame column names in Snowflake Connector for Python and Snowflake Connector for Python (Universal Core)

  Snowflake · Snowflake Connector for Python

  High8.1
• CVE-2026-114456

  Missing origin validation for the externalbrowser authenticator callback in multiple Snowflake client drivers

  Snowflake · Snowflake Connector for Python

  Medium6.5
• CVE-2026-86600

  Workload identity attestation generated before login host validation in Snowflake drivers

  Snowflake · Snowflake Connector for Python

  High8.2
• CVE-2026-86597

  Sensitive information written to logs by Snowflake drivers

  Snowflake · Snowflake Connector for Python

  Medium6.5
• CVE-2026-85525

  Improper OCSP response validation in Snowflake drivers

  Snowflake · Snowflake Connector for Python

  High7.4
• CVE-2026-15925

  Improper TLS Hostname Verification in Snowflake Connector for Python

  Snowflake · Snowflake Connector for Python

  Critical9.2