snowflakedb/snowflake-connector-python Security Advisories | GitStock

critical2026-07-16

Snowflake Connector for Python improperly verifies TLS hostnames

GHSA-5cc2-282f-jjq2 · CVE-2026-15925

high2025-01-29

snowflake-connector-python vulnerable to SQL Injection in write_pandas

GHSA-2vpq-fh52-j3wv · CVE-2025-24793

medium2025-01-29

snowflake-connector-python vulnerable to insecure deserialization of the OCSP response cache

GHSA-m4f6-vcj4-w5mx · CVE-2025-24794

medium2025-01-29

snowflake-connector-python vulnerable to insecure cache files permissions

GHSA-r2x6-cjg7-8r43 · CVE-2025-24795

medium2024-10-24

The Snowflake Connector for Python stores sensitive data in logs

GHSA-5vvg-pvhp-hv2m · CVE-2024-49750

high2023-06-09

Snowflake Python Connector vulnerable to Command Injection

GHSA-5w5m-pfw9-c8fp · CVE-2023-34233

medium2022-11-10

snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

GHSA-4r6j-fwcx-94cf · CVE-2022-42965